CVE-2026-92993Proof of concept (PoC) published · CISA
Dromara mayfly-go Machine Script Feature machine_script.go RunMachineScript os command injection
CVSS score
5.3
EPSS probability
%1.5
Risk score
0.1
Published
28 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.3
CVE-2026-107780
Dromara Skyeye Unauthenticated OS Command Injection via textToSpeech format Parameter
D
Patch status unknownEPSS %2
8.7
CVE-2026-69100
LAMP 5.6.2 GlueFactory Unsandboxed Groovy Script Remote Code Execution
D
Patch verifiedEPSS %1
9.3
CVE-2026-69102
MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust
D
Patch verifiedEPSS %1
9.3
CVE-2026-107779
Dromara Skyeye xxl-job-admin Missing Authentication on Job Endpoints Allows RCE
D
Patch status unknownEPSS %1
8.5
CVE-2026-67345
MaxKey 4.1.12 DefaultRedirectResolver OAuth Authorization Code Theft
D
Patch verifiedEPSS %1
8.7
CVE-2026-91996
lamp-cloud through 5.10.0 Missing Authentication for JVM Properties Endpoint
D
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-92993"