CRITICALCVSS 9.4

CVE-2026-105474

CVE-2026-105474 updated by NVD

Modified: 2026-10-18
Sources: nvd

Summary

A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-105474

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.