CVE-2026-5012

5.5 mediumEPSS 1.5%

Medium (5.5). EPSS 1.5% chance of exploitation in the next 30 days.

A flaw has been found in elecV2 elecV2P up to 3.8.3. This issue affects the function pm2run of the file /rpc. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWEs: CWE-77, CWE-78
Published: 2026-03-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/elecV2/elecV2P/
https://github.com/elecV2/elecV2P/issues/196
https://vuldb.com/submit/779174
https://vuldb.com/vuln/353897
https://vuldb.com/vuln/353897/cti

Check your stack JSON