CVE-2026-1066
BaseFortify
Publication date: 2026-01-17
Last updated on: 2026-04-29
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| kodcloud | kodbox | to 1.61.10 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-77 | The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component. |
| CWE-74 | The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-1066 is a command injection vulnerability in kalcaddle kodbox versions up to 1.61.10, specifically in the Compression Handler component at the endpoint /?explorer/index/zip. It occurs due to improper handling of input used to build system commands, allowing remote attackers to execute arbitrary commands on the affected system without authentication. [2, 3]
How can this vulnerability impact me? :
This vulnerability can lead to full server compromise by allowing remote attackers to execute arbitrary commands. It impacts the confidentiality, integrity, and availability of the affected system, potentially resulting in unauthorized access, data manipulation, or service disruption. [2, 3]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection can involve monitoring for suspicious HTTP requests targeting the endpoint '/?explorer/index/zip' that may include command injection payloads. Network intrusion detection systems (NIDS) can be configured to alert on unusual or malformed requests to this endpoint. Additionally, reviewing web server logs for unexpected parameters or commands in requests to '/?explorer/index/zip' may help identify exploitation attempts. Specific commands depend on the environment, but for example, using tools like curl or wget to simulate requests and checking logs with grep can be useful. Example command to check logs: `grep '/?explorer/index/zip' /var/log/apache2/access.log` or equivalent. Since the exploit is public, searching for known payload patterns in logs can also assist detection. [2]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include upgrading kalcaddle kodbox to version 1.62 or later, where the vulnerability has been patched. If upgrading is not immediately possible, restricting access to the vulnerable endpoint '/?explorer/index/zip' via firewall rules or web application firewall (WAF) rules can reduce exposure. Monitoring and blocking suspicious requests targeting this endpoint is also recommended. Since no other known countermeasures exist, replacing the software with a secure alternative is suggested if patching is not feasible. [2, 3]