Lucene search
+L

1 matches found

osv_cve
osv_cve
•added 2026/03/05 7:34 p.m.•17 views

CVE-2026-28790 OliveTin: Unauthenticated Action Termination via KillAction When Guests Must Login

OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.0, OliveTin allows an unauthenticated guest to terminate running actions through KillAction even when authRequireGuestsToLogin: true is enabled. Guests are correctly blocked from dashboard access, bu...

7.5CVSS7.9AI score0.00676EPSS
SaveExploits1References5
Rows per page
Query Builder