Remote Code Execution in dnsmgr via CheckUtils.php

Publication date: 2026-07-30

Last updated on: 2026-07-30

Assigner: MITRE

Description

An issue in dnsmgr v.2.15 and before allows a local attacker to execute arbitrary code via the ping function of the CheckUils.php file

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-30

Last Modified

2026-07-30

Generated

2026-07-31

AI Q&A

2026-07-31

EPSS Evaluated

N/A

NVD

CVE-2026-35847

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in dnsmgr version 2.15 and earlier. It allows a local attacker to execute arbitrary code by exploiting the ping function in the CheckUtils.php file.

Impact Analysis

If you use dnsmgr v2.15 or earlier, a local attacker with access could run malicious code on your system through the ping function in CheckUtils.php.

Mitigation Strategies

Update dnsmgr to a version beyond 2.15 to remove the vulnerable CheckUils.php file. If updating is not possible, remove or restrict access to the CheckUils.php file to prevent the ping function from being exploited.

Hi! I’m here to help you understand CVE-2026-35847. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70