EUVD-2026-72911

An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...

CVE-2026-79574

mpush v0.8.1 gateway server is vulnerable to remote code execution when an attacker sends a crafted broadcast message. The root cause is tied to how the gateway server processes broadcast messages, allowing arbitrary code execution. A public PoC is available at this GitHub writeup , which documen...