Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.8	EPSS 1.1%	CVE-2026-5603magento2-dev-mcp · OS Command Injection Medium4.8EPSS 1.1%2026-04-05CVE Database V5CVE-2026-5603 CVE-2026-5603 is an OS command injection vulnerability in the elgentos magento2-dev-mcp product versions up to 1.0.2. It affects the executeMagerun2Command function in the src/index.ts file. Exploitation requires local access and can lead to command injection on the operating system level. A patch identified by commit aa1ffcc0aea1b212c69787391783af27df15ae9d is available to remediate this issue. The vulnerability has a medium severity with a CVSS score of 4.8. EPSS 1.1%Vulnerability elgentos	CVE Database V5	2026-04-05

Showing 1–1 of 1 result