CVE-2023-26323

9.8 criticalEPSS 0.6%

Critical (9.8) in mi app market. EPSS 0.6% chance of exploitation in the next 30 days.

A code execution vulnerability exists in the Xiaomi App market product. The vulnerability is caused by unsafe configuration and can be exploited by attackers to execute arbitrary code.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-95
Published: 2024-08-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mi:app_market

References

https://trust.mi.com/misrc/bulletins/advisory?cveId=543

Check your stack JSON