Skip to content
OpenAdvisories

Vendor

seriousm4x

2 known vulnerabilities.

Products

UpSnap 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-49819

    UpSnap - Unauthenticated Initial-Superuser Takeover Chains to Root RCE via wake_cmd

    UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentication / privilege-escalation chain in `pb.HandlerInitSuperuser` (`backend/pb/handlers.go:249`), reachable as `POST /api/upsnap/init-superuser`. The vulnerable c…

    seriousm4x UpSnap
  • Critical 9.6
    CVE-2026-49481

    UpSnap vulnerable to Remote Code Execution via IP Field Template Injection in wake_cmd/shutdown_cmd

    UpSnap is a wake on lan web app. Versions prior to 5.4.0 have an OS command injection vulnerability in the UpSnap’s device management functionality due to the presence of unsafe shell command template interpolation using the ip and the mac fields. User-contro…

    seriousm4x UpSnap