CVE-2026-27182

🗓️ 18 Feb 2026 20:59:12Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 13 Views🌐 WEB

Unauthenticated UDP frames to port 27000 enable remote command execution on Saturn Mouse Server.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2026-27182	18 Feb 202622:19	–	circl
CNNVD	Saturn Remote Mouse Server 访问控制错误漏洞	18 Feb 202600:00	–	cnnvd
Cvelist	CVE-2026-27182 Saturn Remote Mouse Server UDP Command Injection RCE	18 Feb 202620:59	–	cvelist
NVD	CVE-2026-27182	18 Feb 202622:16	–	nvd
Packet Storm	📄 Saturn Remote Mouse Server 1 Command Injection	18 Feb 202600:00	–	packetstorm
Positive Technologies	PT-2026-20518	18 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-27182	20 Feb 202601:22	–	redhatcve
Vulnrichment	CVE-2026-27182 Saturn Remote Mouse Server UDP Command Injection RCE	18 Feb 202620:59	–	vulnrichment

[
  {
    "defaultStatus": "unaffected",
    "product": "Saturn Remote Mouse Server",
    "vendor": "saturnremote",
    "versions": [
      {
        "status": "affected",
        "version": "*"
      }
    ]
  }
]

Source	Link
packetstorm	www.packetstorm.news/files/id/215835/
vulncheck	www.vulncheck.com/advisories/saturn-remote-mouse-server-udp-command-injection-rce
saturnremote	www.saturnremote.com/

Parameter	Position	Path	Description	CWE
JSON-like UDP frames	binary	udp://<target>:27000	Unauthenticated UDP frames on port 27000 allow command injection leading to remote code execution within the service process.	CWE-306
fields forwarded to OS execution functions	binary	udp://<target>:27000	Unauthenticated UDP frames on port 27000 allow command injection leading to remote code execution within the service process.	CWE-306
unsanitized command data	binary	udp://<target>:27000	Unauthenticated UDP frames on port 27000 allow command injection leading to remote code execution within the service process.	CWE-306

15 Apr 2026 00:35Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.18.4

CVSS 48.6

EPSS0.00126

SSVC

CWE-306