Description
Apache Brpc 未授权 命令注入漏洞
Apache Brpc 未授权 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-60021
https://www.cyberark.com/resources/threat-research-blog/cve-2025-60021-cvss-9-8-command-injection-in-apache-brpc-heap-profiler
https://cloud.tencent.com/developer/article/2623180
https://avd.aliyun.com/detail?id=AVD-2025-60021
https://www.gm7.org/archives/32599
https://security.snyk.io/vuln/SNYK-UNMANAGED-APACHEBRPC-15010882
https://www.cnvd.org.cn/flaw/show/CNVD-2026-09794
https://github.com/Mefhika120/Ashwesker-CVE-2025-60021
https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-11229.html/
https://www.penligent.ai/hackinglabs/dissecting-the-apache-brpc-remote-code-execution-a-technical-post-mortem-of-cve-2025-60021/