CVE-2022-46996

9.8 criticalEPSS 1.4%

Critical (9.8) in vsphere selfuse project vsphere selfuse. EPSS 1.4% chance of exploitation in the next 30 days.

vSphere_selfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-912
Published: 2022-12-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vsphere_selfuse_project:vsphere_selfuse

References

https://github.com/SHenry07/vSphere_selfuse/
https://github.com/SHenry07/vSphere_selfuse/issues/39
https://mirrors.neusoft.edu.cn/pypi/web/simple/request/
https://github.com/SHenry07/vSphere_selfuse/
https://github.com/SHenry07/vSphere_selfuse/issues/39

Check your stack JSON