Lucene search
+L

6 matches found

CVE
CVE
added 2026/09/14 6:30 a.m.10 views

CVE-2026-90690

0x4m4 HexStrike AI (up to commit d689933ff579d839c676c82b231f8e98326c5f04) is vulnerable to OS command injection in the API Tools Endpoint component. The flaw resides in the subprocess.Popen call within hexstrike_server.py, where manipulation of arguments such as additional_args, target, username...

7.5CVSS0.0135EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/14 3:00 a.m.12 views

CVE-2026-90620

0x4m4 HexStrike AI is affected by a missing authentication vulnerability in the API Command Endpoint (file hexstrike_server.py), allowing remote attackers to exploit it with no prior privileges. The affected range extends up to commit d689933ff579d839c676c82b231f8e98326c5f04; no specific version ...

7.5CVSS0.00391EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/14 3:00 a.m.14 views

CVE-2026-90620 0x4m4 HexStrike AI API Command Endpoint hexstrike_server.py missing authentication

A vulnerability was determined in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The impacted element is an unknown function of the file hexstrikeserver.py of the component API Command Endpoint. This manipulation causes missing authentication. The attack can be initiated...

7.5CVSS0.00391EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/14 3:00 a.m.7 views

EUVD-2026-77187

A vulnerability was determined in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The impacted element is an unknown function of the file hexstrikeserver.py of the component API Command Endpoint. This manipulation causes missing authentication. The attack can be initiated...

7.5CVSS0.00391EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/14 2:45 a.m.9 views

CVE-2026-90619

0x4m4 HexStrike AI (up to commit d689933ff579d839c676c82b231f8e98326c5f04 ) is affected by an OS command injection in the Execute Endpoint of the file hexstrike_server.py . An unauthenticated remote attacker can manipulate the code/script argument to inject arbitrary OS commands. The proof-of-con...

7.5CVSS0.01362EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/14 2:45 a.m.10 views

CVE-2026-90619 0x4m4 HexStrike AI Execute Endpoint hexstrike_server.py os command injection

A vulnerability has been found in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. Impacted is an unknown function of the file hexstrikeserver.py of the component Execute Endpoint. The manipulation of the argument code/script leads to os command injection. It is possible to...

7.5CVSS0.01362EPSS
SaveExploits0References5
Rows per page
Query Builder