PT-2026-111967 · Undefined · Undefined
CVE-2026-104584
·
Published
2026-10-13
·
Updated
2026-10-13
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Command Injection via the custom headers scan engine configuration field in web/reNgine/tasks.py (fetch url and dir file fuzz functions).
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined