CVE-2026-2333
CRITICALCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2Description
Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds 2.2.0.4 allows Command Injection via a crafted network request.
Analysis
Command injection in Owl OPDS 2.2.0.4 — duplicate of CVE-2026-26093.
Sign in for full analysis, threat intelligence, and remediation guidance.
Remediation
Within 24 hours: Inventory all systems running Owl OPDS 2.2.0.4 and isolate affected instances from production networks if possible; implement network-level access controls to restrict inbound connections to OPDS services. Within 7 days: Deploy WAF rules to block malicious payloads targeting command injection vectors; establish monitoring and alerting for suspicious OPDS traffic patterns; brief incident response team on escalation procedures. …
Sign in for detailed remediation steps.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today