CVE-2024-58287

HighCVSS 8.8/10Last modified Oct 27, 2026

Description

reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan engine configuration that allows authenticated attackers to execute arbitrary commands. Attackers can modify the nmap_cmd parameter with malicious base64-encoded payloads to achieve remote code execution during scan engine configuration.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
rengine	reNgine	2.2.0

References

https://github.com/yogeshojha/rengineProduct
https://rengine.wiki/Product
https://www.exploit-db.com/exploits/52081Exploit, Third Party Advisory, VDB Entry
https://www.vulncheck.com/advisories/rengine-authenticated-command-injection-via-scan-engine-configurationThird Party Advisory

Timeline

Published: Dec 11, 2025
Last modified: Oct 27, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-582888.7Genexus Protection Server 9.7.2.10 contains an unquoted service path vulnerability in the protsrvservice Windows service configuration. Atta CVE-2024-582895.4Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts into CVE-2024-58293.5A vulnerability classified as problematic was found in smallweigit Avue up to 3.4.4. Affected by this vulnerability is an unknown functional CVE-2024-582909.3Xhibiter NFT Marketplace 1.10.2 contains a SQL injection vulnerability in the collections endpoint that allows attackers to manipulate datab CVE-2024-582915.3Flatboard 3.2 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts in f CVE-2024-582925.3XMB Forum 1.9.12.06 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious Ja CVE-2024-582938.6Akaunting 3.1.8 contains a server-side template injection vulnerability that allows authenticated administrators to execute template express CVE-2024-582948.8FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credenti CVE-2024-582958.6ElkArte Forum 1.1.9 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files th CVE-2024-582965.3CE Phoenix v1.0.8.20 contains a stored cross-site scripting vulnerability in the currencies administration panel that allows attackers to in CVE-2024-582975.4PyroCMS v3.0.1 contains a stored cross-site scripting vulnerability in the admin redirects configuration that allows attackers to inject mal CVE-2024-582989.2Compuware iStrobe Web 20.13 contains a pre-authentication remote code execution vulnerability that allows unauthenticated attackers to uploa