CVE-2026-44888

creationtimestamp| type| source ---|---|--- 2026-05-28 03:02:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuztz22cl2n...

CVE-2026-44888

Pi.Alert vulnerability CVE-2026-44888: unauthenticated RCE via SaveConfigFile() config injection. Prior to 2026-05-07, numeric config values (e.g., SMTP_PORT) were written into pialert.conf without validation; pialert.conf is loaded with Python exec() every 3–5 minutes by a background cron, allow...