CyberRota
Back to database

CVE-2026-42601

CRITICAL · CVSS 9.8 EPSS 0.06% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-05-09 · Last synced: 2026-06-08

CyberRota Analysis

Detaylı analiz gerekiyor.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-42601
Severity
CRITICAL
CVSS
9.8
EPSS
0.06%

Original NVD Description

ArchiveBox is an open source self-hosted web archiving system. In versions 0.8.6rc0 and prior, the /add/ endpoint (AddView in core/views.py) accepts a config JSON field that gets merged into the crawl config without validation. This config is exported as environment variables when archive plugins run, allowing injection of arbitrary tool arguments to achieve RCE. At time of publication, there are no publicly available patches.