CVE-2019-18871

8.8 highEPSS 2.5%

High (8.8) in blaauwproducts remote kiln control. EPSS 2.5% chance of exploitation in the next 30 days.

A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbitrary files, leading to arbitrary remote code execution.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2020-05-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

blaauwproducts:remote_kiln_control

References

https://github.com/lodestone-security/CVEs/blob/master/remote_kiln_control/an_unfortunate_kilnundrum.md
https://github.com/lodestone-security/CVEs/blob/master/remote_kiln_control/an_unfortunate_kilnundrum.md

Check your stack JSON