Description
A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WebPros | SolusVM 2 | ≤ 2.0.0-44576 | — |
Critical · 9.4
CVE-2026-105474
EUVD-2026-102142GHSA-359r-cw6w-hmm4
A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary …
Published Oct 15, 2026 · Updated Oct 15, 2026 · Assigned by hackerone