Critical RCE Vulnerability in ImunifyAV Affects Millions of Linux Servers

Critical RCE Vulnerability in ImunifyAV Affects Millions of Linux Servers

First seen 2 Dec 2025, 18:33 UTC •BleepingcomputerGbhackersAcronis •86% similarity •28.6

Article Content

Browse articles
ThreatCluster

A remote code execution vulnerability was found in the AI-Bolit component of ImunifyAV, impacting millions of Linux servers and websites. This flaw allows attackers to execute arbitrary code and escalate privileges to root. Versions prior to 32.7.4.0 are affected, and the vulnerability has been known since an unspecified date.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Lazarus APT Group Unc1549 AI-bolit Remcos CloudLinux Patchstack CentOS 6 ImunifyAV Linux ModSecurity