Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/27 7:15 p.m.5 views

CVE-2026-44887 Unauthenticated RCE via Python Config File Injection in SaveConfigFile() (Path)

Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Alert's web-based configuration editor allows arbitrary Python code to be injected into pialert.conf. Since the background scan daemon loads this file via Python's exec, injected code executes as the...

9.8CVSS6.2AI score0.00545EPSS
SaveExploits0References3
Rows per page
Query Builder