p PatchFirst

CVE-2026-105474

CVE-2026-105474

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.

CVSS 9.4 · Critical · EPSS 0.5%

Published
Updated

Affected products and versions

  • solusvm 2

    Versions
    • ≥ 0, ≤ 2.0.0-44576: Affected (semver)

    No fix published

Original sources

Check your server →