ExploitPublished
RPi-Jukebox-RFID 2.8.0 - Remote Command Execution
Source Exploit-DB RSS Feed
0
Severity
MediumRated by Threat Radar
Data as of 10 Apr 2026, 00:24 UTC
What to do
AI-suggested
Until an official fix is released, users should consider restricting network access to the affected service and monitor for suspicious activity. Avoid exposing the vulnerable version to untrusted networks.
Description
RPi-Jukebox-RFID 2.8.0 - Remote Command Execution
Indicators of compromise
Exploit source code
# Exploit Title: RPi-Jukebox-RFID 2.8.0 - Remote Code Execution
# Date: 2025-09-25
# Exploit Author: Beatriz Fresno Naumova
# Vendor Homepage: https://github.com/MiczFlor/RPi-Jukebox-RFID
# Software Link: https://github.com/MiczFlor/RPi-Jukebox-RFID/releases/tag/v2.8.0
# Version: 2.8.0
# Tested on: Raspberry Pi OS with RPi-Jukebox-RFID v2.8.0
# CVE: CVE-2025-10327
#
# Description:
# This PoC demonstrates an OS command injection vulnerability in the shuffle.php API endpoint.
# The vulnerable par…References
Community reviews
Loading reviews…