Back to the CVE list

CVE-2026-43641Proof of concept (PoC) published · CISASuited to automated attack · CISA

Softaculous Virtualizor OS Command Injection via Billing Module Handler

CVSS score

9.3

EPSS probability

%3.0

Risk score

0.3

Published

27 d ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

9.2

CVE-2026-43642Softaculous Virtualizor PHP Object Injection via Billing Module Handler

VendorSoftaculous ProductVirtualizor

Patch verifiedEPSS %127 d ago

8.7

CVE-2026-43643Softaculous Virtualizor Authorization Bypass via Billing Module Handler

VendorSoftaculous ProductVirtualizor

Patch verifiedEPSS %127 d ago

8.0

CVE-2026-93953Backuply <= 1.5.8 - Authenticated (Subscriber+) Second-Order SQL Injection via Restore to Privilege Escalation

VendorSoftaculous ProductBackuply – Backup, Restore, Migrate and Clone

Patch status unknownEPSS %03 d ago

7.2

CVE-2026-96768GoSMTP Pro <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Email Log Body

VendorSoftaculous ProductGoSMTP Pro

Patch status unknownEPSS %03 d ago

3.7

CVE-2026-104006SpeedyCache <= 1.4.2 - Unauthenticated Sensitive Information Exposure via Insecure Cache Configuration via Cache Write Gate Missing comment_author_* Cookie Check

VendorSoftaculous ProductSpeedyCache – Cache, Optimization, Performance

Patch status unknownEPSS %09 d ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-43641"