CVE-2024-26289

moderate-risk
Published 2024-05-27

Deserialization of Untrusted Data vulnerability in PMB Services PMB allows Remote Code Inclusion.This issue affects PMB: from 7.5.1 before 7.5.6-2, from 7.4.1 before 7.4.9, from 7.3.1 before 7.3.18.

Do I need to act?

-
0.19% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Pmb

Affected Vendors

Sigb

References (4)

Product https://forge.sigb.net/projects/pmb/files
Third Party Advisory https://github.com/enisaeu/CNW/blob/main/advisories/2024/CNW-2024-A-12.md
Product https://forge.sigb.net/projects/pmb/files
Third Party Advisory https://github.com/enisaeu/CNW/blob/main/advisories/2024/CNW-2024-A-12.md
38
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 1/34 · Minimal
Exposure 5/34 · Minimal