CVE-2026-30616

EUVD-2026-22939 HIGH

Command Injection (CWE-77)

2026-04-15 mitre

Command Injection RCE

7.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.3 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

CVSS changed

Apr 15, 2026 - 18:22 NVD

7.3 (None) 7.3 (HIGH)

EUVD ID Assigned

Apr 15, 2026 - 15:30 euvd

EUVD-2026-22939

CVE Published

Apr 15, 2026 - 00:00 nvd

HIGH 7.3

DescriptionCVE.org

Jaaz 1.0.30 contains a remote code execution vulnerability in its MCP STDIO command execution handling. A remote attacker can send crafted network requests to the network-accessible Jaaz application, causing attacker-controlled commands to be executed on the server. Successful exploitation results in arbitrary command execution within the context of the Jaaz service, potentially allowing full compromise of the affected system.