CVE-2024-24621

9.8 criticalEPSS 1.2%

Critical (9.8) in softaculous webuzo. EPSS 1.2% chance of exploitation in the next 30 days.

Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulnerability to gain full server access as the root user.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-697
Published: 2024-07-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

softaculous:webuzo

References

https://blog.exodusintel.com/2024/07/25/softaculous-webuzo-authentication-bypass/
https://blog.exodusintel.com/2024/07/25/softaculous-webuzo-authentication-bypass/

Check your stack JSON