CVE-2024-58278

8.5 highEPSS 0.2%

High (8.5). EPSS 0.2% chance of exploitation in the next 30 days.

perl2exe <= V30.10C contains an arbitrary code execution vulnerability that allows local authenticated attackers to execute malicious scripts. Attackers can control the 0th argument of packed executables to execute another executable, allowing them to bypass restrictions and gain unauthorized access.

Severity

CVSS 4.0

8.5 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2025-12-04
Modified: 2026-09-26
Record from: the NVD, synced 2026-10-19

References

https://www.exploit-db.com/exploits/51825
https://www.indigostar.com/
https://www.indigostar.com/download/p2x-30.10-Linux-x64-5.30.1.tar.gz
https://www.vulncheck.com/advisories/indigostar-software-perl2exe-v3010c-arbitrary-code-execution

Check your stack JSON