CVE-2026-105474

WebPros / SolusVM 2 PUBLISHED

Description (CNA)

A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.

Affected (CNA)

Vendor / product	Versions
WebPros / SolusVM 2	affected 0 through 2.0.0-44576

CWE

CWE-1336

References

https://support.solusvm.com/hc/en-us/articles/44057968061591-CVE-2026-105474-Server-Side-Template-Injection-in-SolusVM-2

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.