Skip to content

CVE-2026-88062

CVE

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
September 10, 2026
Last Seen
September 11, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

OmniRoute Vulnerability Leads to Remote Code Execution Risk69.0

A critical vulnerability (CVE-2026-88062) in OmniRoute's custom ACP agent endpoint allows remote code execution via user-controlled inputs. The flaw is present in versions 3.8.49 and earlier, where the endpoint accepts arbitrary binary and versionCommand values without proper validation. Attackers c...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Zero-day ExploitCWE-287 - Improper AuthenticationCWE-94 - Code InjectionCWE-306 - Missing Authentication For Critical FunctionCWE-78 - OS Command InjectionT1059 - Command and Scripting InterpreterT1059.007 - JavaScriptT1190 - Exploit Public-Facing ApplicationLinuxOmniRouteNode.js