Description
MajorDoMo存在远程代码执行漏洞。用户可利用该漏洞执行任意php代码导致服务器权限被获取。
MajorDoMo存在远程代码执行漏洞(CVE-2026-27174)
PoC
https://trap.biu.life/intelligence/69e6ebe6927d7647322cb214
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://nvd.nist.gov/vuln/detail/CVE-2026-27174
https://www.sentinelone.com/vulnerability-database/cve-2026-27174/
https://www.cvedetails.com/cve/CVE-2026-27174/
https://chocapikk.com/posts/2026/majordomo-revisited/
https://github.com/advisories/GHSA-8p47-wg5j-hm56
https://www.resecurity.com/blog/article/critical-majordomo-rce-cve-2026-27174-unauthenticated-remote-code-execution-analysis
https://www.cve.org/CVERecord?id=CVE-2026-27174
https://cybersecuritynews.com/majordomo-rce-vulnerability/
https://www.vulncheck.com/advisories/majordomo-unauthenticated-remote-code-execution-via-admin-console-eval