THREATOPS
THREAT OPSThreat News › [0day-rubbish] CacheGuard OS UF-2.5.2 Authenticated RCE via config-import eval injection (8.8)

[0day-rubbish] CacheGuard OS UF-2.5.2 Authenticated RCE via config-import eval injection (8.8)

lowfulldisclosurePublished 2026-08-26

<p>Posted by disclosure via Fulldisclosure on Aug 26</p>0day Rubbish Research Team is publicly disclosing a vulnerability in CacheGuard OS UF-2.5.2.<br /> <br /> Type: Authenticated RCE via config-import eval injection (CWE-94)<br /> CVSS: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)<br /> Impact: Authenticated escalation from the restricted admin shell to arbitrary command execution, placin

Original source: https://seclists.org/fulldisclosure/2026/Aug/94