← Database

CVE-2022-1509

CRITICAL CVSS: 9.9 Published: 2022-04-28 Modified: 2026-06-17

Description

Command Injection Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.12. An authenticated remote attacker with low privileges can execute arbitrary code under root context.

Affected Platforms

Hestiacp Control Panel

Weakness Type

CWE-77, CWE-77

References