CVE-2026-52439

CriticalCVSS 9.8

Published: 23/07/2026(UTC)Updated: 28/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.52%

41th percentile - higher than 41% of all known CVEs

Summary

A vulnerability in beetl library version 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the property reflection mechanism.

Risk Assessment

An attacker can remotely take over the application server, leading to full system and data compromise.

Recommendation

Update the beetl library to the latest available version that fixes this vulnerability.

Original NVD description (English source)

An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the property reflection mechanism