CVE-2026-32968 — Unauthenticated RCE in com_mb24sysapi
Due to the improper neutralisation of special elements used in an OS command, an unauthenticated remote attacker can exploit an RCE vulnerability in the com_mb24sysapi module, r…
Published: 2026-03-23 · CVSS: 9.8 · CVSS 3.1
Due to the improper neutralisation of special elements used in an OS command, an unauthenticated remote attacker can exploit an RCE vulnerability in the com_mb24sysapi module, resulting in full system compromise. This vulnerability is a variant attack for CVE-2020-10383.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7