CVE-2021-26752

NeDi 1.9C allows an authenticated user to execute operating system commands in the Nodes Traffic function on the endpoint /Nodes-Traffic.php via the md or ag…

published February 12, 2021

CVSS
—
EPSS
1%
Percentile
73.9
In the wild
Unconfirmed
What it is

NeDi 1.9C allows an authenticated user to execute operating system commands in the Nodes Traffic function on the endpoint /Nodes-Traffic.php via the md or ag HTTP GET parameter. This allows an attacker to obtain access to the operating system where NeDi is installed and to all application data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01490 · 73.9th percentile
Published
2021-02-12T20:35Z
EPSS history
Timeline
  • 12 FEB 20:35Z
    NeDi 1.9C allows an authenticated user to execute operating system commands in the Nodes Traffic function on the endpoint /Nodes-Traffic.php via the md or ag…
    cvelistv5