CVE-2026-42785

🗓️ 26 May 2026 14:08:51Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 12 Views🌐 WEB

OpenKM 6.3.12 allows admins to execute commands via the admin scripting endpoint action=Evaluate.

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2026-42785	26 May 202614:08	–	attackerkb
CNNVD	OpenKM 代码注入漏洞	26 May 202600:00	–	cnnvd
Cvelist	CVE-2026-42785 OpenKM 6.3.12 Remote Code Execution via Administrative Scripting	26 May 202614:08	–	cvelist
EUVD	EUVD-2026-31835	26 May 202614:08	–	euvd
NVD	CVE-2026-42785	26 May 202615:16	–	nvd
Positive Technologies	PT-2026-43255	26 May 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-42785 OpenKM 6.3.12 Remote Code Execution via Administrative Scripting	26 May 202614:08	–	vulnrichment

Vulners

CNA

Node

openkm openkm_community_editionRange0–6.3.12

openkm openkm_professional_editionRange0–7.1.47

[
  {
    "vendor": "Openkm",
    "product": "OpenKM Community Edition",
    "versions": [
      {
        "version": "0",
        "lessThanOrEqual": "6.3.12",
        "status": "affected",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Openkm",
    "product": "OpenKM Professional Edition",
    "versions": [
      {
        "version": "0",
        "lessThanOrEqual": "7.1.47",
        "status": "affected",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
openkm	www.openkm.com/
github	www.github.com/terrasystemlabs/Exploits/tree/main/OpenKM-Exploits/nuclei-templates/openkm-remote-code-execution
terrasystemlabs	www.terrasystemlabs.com/post
vulncheck	www.vulncheck.com/advisories/openkm-remote-code-execution-via-administrative-scripting
exploit-db	www.exploit-db.com/exploits/52520
hub	www.hub.docker.com/r/openkm/openkm-ce
github	www.github.com/terrasystemlabs/Exploits/tree/main/OpenKM-Exploits

Parameter	Position	Path	Description	CWE
action	request body	/admin/Scripting	Authenticated administrators can trigger remote code execution by POSTing/PUTting malicious script content to /admin/Scripting with action=Evaluate, executing Java/BeanShell code in the server context.	CWE-94
scriptContent	request body	/admin/Scripting	Authenticated administrators can trigger remote code execution by POSTing/PUTting malicious script content to /admin/Scripting with action=Evaluate, executing Java/BeanShell code in the server context.	CWE-94

26 May 2026 19:47Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17.2

CVSS 48.6

EPSS0.00549

SSVC

CWE-94