Clearos
Monthly
OS command injection in ClearOS 7.9's Log Viewer component allows authenticated attackers to execute arbitrary commands as the webconfig user and immediately escalate to full root access via default NOPASSWD sudo privileges. The vulnerable parameter (`filter`) in `File.php` is interpolated directly into a shell command without sanitization, making exploitation trivial once credentials are obtained. A public proof-of-concept exploit is available via lazytitan.ro and documented by VulnCheck; no CISA KEV listing is present, so confirmed widespread active exploitation has not been established at time of analysis.
OS command injection in ClearOS 7.9's Log Viewer component allows authenticated attackers to execute arbitrary commands as the webconfig user and immediately escalate to full root access via default NOPASSWD sudo privileges. The vulnerable parameter (`filter`) in `File.php` is interpolated directly into a shell command without sanitization, making exploitation trivial once credentials are obtained. A public proof-of-concept exploit is available via lazytitan.ro and documented by VulnCheck; no CISA KEV listing is present, so confirmed widespread active exploitation has not been established at time of analysis.