Thehp Global DNS versions up to 3.1.0 suffer from an improper control of code generation vulnerability classified as remote code inclusion. This flaw enables unauthenticated remote attackers to inject and execute arbitrary code on affected systems. The vulnerability is critical with a CVSS 3.1 base score of 10.0, reflecting network attack vector, low complexity, no privileges or user interaction required, and complete compromise of confidentiality, integrity, and availability. No patch or official remediation guidance has been published so far, and the product is not cloud-hosted, so patching must be applied by administrators once available.

Successful exploitation allows remote attackers to execute arbitrary code on thehp Global DNS servers, resulting in full system compromise including confidentiality, integrity, and availability impacts. This could lead to complete control over the affected DNS infrastructure, potentially disrupting DNS services and enabling further attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict access to the affected Global DNS instances and monitor for suspicious activity. Do not expose the vulnerable service to untrusted networks. Follow vendor communications closely for updates on official fixes.