CVE-2024-39148

creationtimestamp| type| source ---|---|--- 2025-12-01 23:07:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6xk6x5gl32n...

CVE-2024-39148

CVE-2024-39148 affects KerOS prior to 5.12. The issue is in the wmp-agent service, which does not properly validate the so‑called ‘magic URLs’, allowing an unauthenticated attacker to execute arbitrary OS commands as root if the service is reachable over the network. Documents from Red Hat, ENISA...