CVE-2026-35847

CriticalCVSS 9.8

Published: 30/07/2026(UTC)Updated: 31/07/2026(UTC)Translated: 31/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

29th percentile - higher than 29% of all known CVEs

A vulnerability in dnsmgr version 2.15 and earlier allows a local attacker to execute arbitrary code via the ping function in the CheckUils.php file.

A local attacker can take control of the system by executing malicious code, leading to full server compromise.

Update dnsmgr to the latest version that fixes this vulnerability and restrict access to the ping function to trusted users only.

Original NVD description (English source)

An issue in dnsmgr v.2.15 and before allows a local attacker to execute arbitrary code via the ping function of the CheckUils.php file