OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-51870

CRITICAL · CVSS 9.8 EPSS 0.91% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-30 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

DeepTutor v1.4.0 contains a command execution vulnerability in the ExecTool.execute function within the shell.py file, allowing unauthorized users to execute arbitrary commands on the server. This could lead to significant security breaches, including data manipulation or system compromise. Organizations using this version of DeepTutor should prioritize addressing this vulnerability to mitigate potential risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
gist.github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-51870
Severity
CRITICAL
CVSS
9.8
EPSS
0.91%

Original NVD Description

DeepTutor v1.4.0 is vulnerable to command execution in /tutorbot/agent/tools/shell.py:ExecTool.execute.