CVE-2023-26324

9.8 criticalEPSS 0.6%

Critical (9.8) in mi getapps. EPSS 0.6% chance of exploitation in the next 30 days.

A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an attacker can exploit this vulnerability to execute malicious code.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2024-08-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mi:getapps

References

https://https://trust.mi.com/misrc/bulletins/advisory?cveId=544

Check your stack JSON