MinorCritical vulnerability

CVE-2026-76714 (CVSS 7.2)

NVD · officialPublished Sep 22, 2026Risk 23/100EPSS 0.8%

Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

Technical details

CVSS

7.2

AV:NetworkAC:LowPR:HighUI:NoneC:HighI:HighA:High

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source