CVE-2026-27182CWE-306

Saturn Remote Mouse Server UDP Command Injection RCE

High · published February 18, 2026

CVSS v4.0
8.6
EPSS
1%
Percentile
69.2
In the wild
Unconfirmed
What it is

Saturn Remote Mouse Server contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending specially crafted UDP JSON frames to port 27000. Attackers on the local network can send malformed packets with unsanitized command data that the service forwards directly to OS execution functions, enabling remote code execution under the service account.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.01252 · 69.2th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-02-18T20:59Z
EPSS history
Timeline
  • 18 FEB 20:59Z
    Saturn Remote Mouse Server UDP Command Injection RCE
    cvelistv5