CVE-2014-6271General(apple / arx)

CRITICALCVSS 9.8 · CRITICALCISA KEV

Exploitation observed; activity peaked at 3 mentions and remains active

Immediate actions

Patch apple arx systems immediately
Assume compromise if assets are exposed
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: Immediate (within 24h)

NVD description

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

apple CVEs Back to dashboard

9.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-07-28. Apply updates per vendor instructions.

Patch / fix

Exploit / PoC references

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-78

Priority

CRITICAL

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

arx
arx_firmware
bash
big-ip_access_policy_manager

Threat summary

Active exploitation appears in 1 classified signals
Public PoC and exploit tooling are both present
Patch or workaround signal is available
19 mentions across 16 observed days

What's happening

Active exploitation reported across 1 signal
Exploit tool or code specified in 2 signals
PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 11 signals
General: 16 classified signals
Peaked 13d ago at 3 mentions (2026-04-25); latest day: 1
19 total mentions across 16 days

Affected systems

Vendors

apple arista canonical checkpoint citrix debian f5 gnu

Products

arxarx_firmwarebashbig-ip_access_policy_managerbig-ip_advanced_firewall_managerbig-ip_analyticsbig-ip_application_acceleration_managerbig-ip_application_security_managerbig-ip_edge_gatewaybig-ip_global_traffic_manager

102 versions affected across 85 products

Deep dive

Activity timeline19 mentions / 16d

Signal classification3 categories

General

1684.2%

Exploit

210.5%

Active Exploitation

15.3%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-07	1	General1
2026-03-08	2	General2
2026-04-25	3	General3
2026-04-26	1	General1
2026-05-09	1	Exploit1
2026-06-06	1	General1
2026-06-20	1	Active Exploitation1
2026-07-04	1	General1
2026-07-09	1	General1
2026-07-18	1	General1
2026-08-01	1	General1
2026-08-09	1	General1
2026-08-28	1	Exploit1
2026-09-08	1	General1
2026-09-13	1	General1
2026-09-14	1	General1

Full discourse19 posts

Nitin Gavhane@NitinGavhane_24d
General
CVE Vulnerabilities That Shaped the Bug Bounty World A quick timeline worth knowing: 1. CVE-2014-0160 • Heartbleed - 2014 2. CVE-2014-6271 • Shellshock - 2014 3. CVE-2016-5195 • Dirty COW - 2016 4. CVE-2017-0144 • EternalBlue - 2017 5. CVE-2017-5638 • Apache Struts RCE - 2017 6. CVE-2018-7600 • Drupalgeddon2 - 2018 7. CVE-2019-0708 • BlueKeep - 2019 8. CVE-2021-44228 • Log4Shell - 2021 9. CVE-2023-34362 • MOVEit - 2023 10. CVE-2024-3094 • XZ Utils - 2024 Learn the CVE → understand the root cause → study the patch → reproduce safely in a lab. #BugBounty #CVE #CyberSecurity #SecurityResearch #EthicalHacking #InfoSec #AppSec #Pentesting
Post summary
This is a general educational post listing historically significant CVEs in a timeline format without providing specific technical details, PoC references, exploit tools, active exploitation claims, or named remediation actions for any of the vulnerabilities.
31411016411.3K
3.5K followersView on X
🚨 D7M | Aws@x0D7M214d
General
ىـ Day76 احمد الله اني قدرت انزل لكم اليوم وحدة ال6- System-Host-Based-Attacks لـ دورتي لـ تحضير شهادة الـ eJPT.v2 (مجانا💵) 24 درس عملية و نظرية مثل استغلال ثغرة Shellshock (CVE-2014-6271) وتكلمت عن انواع الهاشات واشياء اكثر الرابط : https://wd7m.com/courses/6?lesson=YmZjZmE3Y2MtOGE4Mi00MzRiLWEzOGYtOWRkMmJiYzgyNTAy وتابع @x0D7M https://t.co/hT8ta2Dfba
Post summary
The post references the Shellshock vulnerability as part of a training course, but it provides no additional technical, exploit, or patch details.
03145329.6K
2.8K followersView on X
La Rinascente@La_Rinascente166d
General
@Twt98057665 GNU Bashの脆弱性「Shellshock」（CVE-2014-6271）は、25年間もの間、コードベースに潜んでいた脆弱性カーネルではないけど25年抱えていて後出しジャンケンで出てくるので運を天に任せるしかないと思います。できるだけ脆弱性なくすためにrustで書き直す可能性もあるとおもいます。
Post summary
The tweet simply notes that Shellshock has been hidden in Bash for 25 years, with no information on PoC, exploitation, patches, or technical specifics.
0411612.8K
2.8K followersView on X
𝕏 Bug Bounty Writeups 𝕏@bountywriteups214d
General
CVE-2014–6271 — Shellshock Vulnerability Explained https://medium.com/@anaselmendili13/cve-2014-6271-shellshock-vulnerability-explained-ca784ba60b5e?source=rss------bug_bounty-5 #bugbounty #bugbountytips #bugbountytip
Post summary
The tweet shares a Medium link that explains the Shellshock vulnerability but does not provide technical details, PoC, exploit code, or patch information.
000710642
40.3K followersView on X
van.sol@evaneguzozie60d
General
Shellshock (CVE-2014-6271) — the name says it all 😂. It targets Bash, and here’s the catch: CGI scripts can be written in different languages, but Bash-based CGI scripts are vulnerable. So, static pages or safer CGI languages can help reduce the risk. https://t.co/f3plOsjwcD
Post summary
The post briefly explains Shellshock (CVE‑2014‑6271) and suggests avoiding Bash‑based CGI scripts as a mitigation.
0100048
45 followersView on X
xHackInSeconds@xHackInSeconds68d
General
Shellshock. CVE-2014-6271. A 10-year-old vulnerability still sitting wide open in production. Root in one payload. #infosec #vulnerability https://t.co/pbodIaEczZ
Post summary
The tweet highlights that the long‑disclosed Shellshock vulnerability (CVE‑2014‑6271) remains rampant in production environments and can elevate privileges to root with a single payload, yet no details on patches, active exploitation, or PoC code are provided.
0000144
80 followersView on X
r0otk3r@r0otk3r91d
General
💀CVE-2014-6271: Shellshock Exploitation 🖥️ Hack Sudo Thor - VulnHub Walkthrough ⚠️ For educational purposes and authorized testing only. #HackSudoThor #Vulnhub #Shellshock #CVE20146271 #RCE #OSCP #Pentesting #EthicalHacking #Infosec #LinuxSecurity https://t.co/IcUbQc94A8
Post summary
The tweet discusses a Shellshock (CVE‑2014‑6271) walkthrough for educational purposes, without providing exploit code, patches, or evidence of active exploitation.
0001054
43 followersView on X
CVETrends@CVEShield165d
General
Top 5 Trending CVEs: 1 - CVE-2014-6271 2 - CVE-2026-35535 3 - CVE-2024-7399 4 - CVE-2025-29635 5 - CVE-2026-0628 #cve #cvetrends #cveshield #cybersecurity https://www.cveshield.com/dashboard
Post summary
The post simply lists trending CVE identifiers without additional context or technical detail.
00010768
1.7K followersView on X
icpolicy@icpolicy165d
General
@unrandomxddddd @YoshikoJanai @Calomby @wisplite @Not_Prasar @grok Well, from your answer we can infer you do not know what a cite is. It's the name of a thing (Goodnight Moon) and not instructions on how to get it (children's section at B&N, dipshit) CVE-2014-6271 is a cite. It identifies a unique document from an authority. It's shellshock.
Post summary
The tweet only mentions CVE‑2014‑6271 as Shellshock, with no further technical, exploit, or patch details provided.
1000089
137 followersView on X
icpolicy@icpolicy165d
General
@unrandomxddddd @YoshikoJanai @Calomby @wisplite @Not_Prasar @grok I think you might be confused dude, I didn't cite "twitter." I gave the names of the vast categories of attacks. Look them up! One that comes to mind would be CVE-2014-6271, classic blind injection. The more you know about the interior environment in conjunction, the better.
Post summary
The tweet references CVE-2014-6271 as a blind injection vulnerability but offers no actionable details, PoC, exploit, patch, or evidence of active exploitation.
1000061
137 followersView on X
TL;DR CTF with Onurcan@CtfWithOG214d
General
5/10 Navigate to /cgi-bin/user.sh it executes and returns uptime output directly in the browser. CGI script + bash = Shellshock attack surface. CVE-2014-6271. A bash env variable parsing bug that lets you inject arbitrary commands via HTTP headers
Post summary
The tweet notes that CVE‑2014‑6271 (Shellshock) permits arbitrary command injection through HTTP headers but provides no PoC, exploit, patch, or claim of active exploitation.
1000021
4 followersView on X
chaos@konig000024d
General
CVE Vulnerabilities That Shaped the Bug Bounty World A quick timeline worth knowing: 1. CVE-2014-0160 • Heartbleed - 2014 2. CVE-2014-6271 • Shellshock - 2014 3. CVE-2016-5195 • Dirty COW - 2016 4. CVE-2017-0144 • EternalBlue - 2017 5. CVE-2017-5638 • Apache Struts RCE - 2017 6. CVE-2018-7600 • Drupalgeddon2 - 2018 7. CVE-2019-0708 • BlueKeep - 2019 8. CVE-2021-44228 • Log4Shell - 2021 9. CVE-2023-34362 • MOVEit - 2023 10. CVE-2024-3094 • XZ Utils - 2024 Learn the CVE → understand the root cause → study the patch → reproduce safely in a lab.
Post summary
The post is a historical/educational timeline of notable CVEs for bug bounty learning, with no strong PoC, exploit, active exploitation, or specific patch guidance.
00000121
19.8K followersView on X
Marshal | Cybersecurity@u8341030d
General
Day 70 #100DaysOfCybersecurity Closed out Project 2 (Splunk SIEM lab) today with the final detection use case: Shellshock (CVE-2014-6271) exploit attempt detection. Simulated the classic () { :;}; payload across 3 injection vectors (User-Agent, Referer, Cookie) from Kali → caught all 4 attempts in Splunk with a raw-regex detection that doesn't care which header carries the payload. 3/3 detections done for this project: 🔓 SSH brute-force 🕵️ Web scanner/recon (Nikto — 7,752 unique paths, 96% 404 rate 👀) 💥 Shellshock exploit attempts MITRE: T1190 (Exploit Public-Facing Application) Full write-up + SPL queries → GitHub (https://github.com/OMELETTESOGOOD/Cybersecurity-Projects/tree/main/Project-2/splunk_siem_project/stage-3) #SOC #Splunk #BlueTeam #DetectionEngineering
Post summary
The post outlines a detection‑engineering use case for Shellshock (CVE‑2014‑6271), simulating payload injections across headers and presenting detection queries, without providing PoC code, active exploitation claims, or patches.
0000032
59 followersView on X
Charlie 🍀@_Charlie_Chang_41d
Exploit
exploit/multi/ssh/sshexec auxiliary/scanner/ssh/ssh_shellshock (CVE-2014-6271) 🙅
Post summary
The content references Metasploit exploit modules targeting CVE‑2014‑6271, indicating that functional exploit code is available, but there is no evidence of active attacks or a patch.
00000271
240 followersView on X
xHackInSeconds@xHackInSeconds82d
General
Shellshock. CVE-2014-6271. A 10-year-old vulnerability still sitting wide open in production. Root in one payload. #infosec #vulnerability https://t.co/cTEFocnat8
Post summary
The tweet highlights that the Shellshock vulnerability (CVE‑2014‑6271) remains widely unpatched, noting it can yield root with one payload. It primarily serves as a reminder of the ongoing risk of this 10‑year‑old flaw.
0000053
73 followersView on X
xHackInSeconds@xHackInSeconds96d
General
Shellshock. CVE-2014-6271. A 10-year-old vulnerability still sitting wide open in production. Root in one payload. #infosec #vulnerability https://t.co/d52dsBM2W5
Post summary
The tweet remarks that the Shellshock vulnerability (CVE‑2014‑6271) remains exposed in production and can grant root access with a single payload, but no PoC, exploit, patch, or active exploitation details are provided.
0000055
69 followersView on X
xHackInSeconds@xHackInSeconds110d
Active Exploitation
Shellshock. CVE-2014-6271. A 10-year-old vulnerability still sitting wide open in production. Root in one payload. #infosec #vulnerability https://t.co/OQcXyNMpsn
Post summary
Shellshock (CVE‑2014‑6271) remains unpatched in production, with a single payload capable of achieving root, underscoring ongoing exploitation risk.
0000049
54 followersView on X
xHackInSeconds@xHackInSeconds124d
General
Shellshock. CVE-2014-6271. A 10-year-old vulnerability still sitting wide open in production. Root in one payload. #infosec #vulnerability https://t.co/XjSt6Xqz0M
Post summary
The tweet points out that the Shellshock CVE‑2014‑6271 remains unpatched in production but offers no technical, PoC, or exploitation details.
0000048
45 followersView on X
R3dF0x1c@R3dF0x1c152d
Exploit
🔓 Shocker pwned! #HackTheBox CGI + Shellshock (CVE-2014-6271) vía User-Agent → RCE → sudo perl → root 🎯 Un script bash en cgi-bin sigue siendo crítico en 2026. https://labs.hackthebox.com/achievement/machine/2451184/108 #Pentesting #CJCA #CyberSecurity
Post summary
The post outlines a Shellshock exploitation chain through a CGI script, detailing how the vulnerability can be abused to gain root privileges, but does not mention patches, active attacks, or a proof‑of‑concept.
0000077
5 followersView on X

CPE platform detail308 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

308 of 308 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	apple	mac_os_x	-	-	-
OS	arista	eos	-	-	-
OS	canonical	ubuntu_linux	10.04	-	-
OS	canonical	ubuntu_linux	12.04	-	-
OS	canonical	ubuntu_linux	14.04	-	-
App	checkpoint	security_gateway	-	-	-
HW	citrix	netscaler_sdx	-	-	-
OS	citrix	netscaler_sdx_firmware	-	-	-
OS	debian	debian_linux	7.0	-	-
HW	f5	arx	-	-	-
OS	f5	arx_firmware	-	-	-
App	f5	big-ip_access_policy_manager	-	-	-
App	f5	big-ip_access_policy_manager	11.6.0	-	-
App	f5	big-ip_advanced_firewall_manager	-	-	-
App	f5	big-ip_advanced_firewall_manager	11.6.0	-	-
App	f5	big-ip_analytics	-	-	-
App	f5	big-ip_analytics	11.6.0	-	-
App	f5	big-ip_application_acceleration_manager	-	-	-
App	f5	big-ip_application_acceleration_manager	11.6.0	-	-
App	f5	big-ip_application_security_manager	-	-	-
App	f5	big-ip_application_security_manager	11.6.0	-	-
App	f5	big-ip_edge_gateway	-	-	-
App	f5	big-ip_global_traffic_manager	-	-	-
App	f5	big-ip_global_traffic_manager	11.6.0	-	-
App	f5	big-ip_link_controller	-	-	-
App	f5	big-ip_link_controller	11.6.0	-	-
App	f5	big-ip_local_traffic_manager	-	-	-
App	f5	big-ip_local_traffic_manager	11.6.0	-	-
App	f5	big-ip_policy_enforcement_manager	-	-	-
App	f5	big-ip_policy_enforcement_manager	11.6.0	-	-
App	f5	big-ip_protocol_security_module	-	-	-
App	f5	big-ip_wan_optimization_manager	-	-	-
App	f5	big-ip_webaccelerator	-	-	-
App	f5	big-iq_cloud	-	-	-
App	f5	big-iq_device	-	-	-
App	f5	big-iq_security	-	-	-
App	f5	enterprise_manager	-	-	-
App	f5	traffix_signaling_delivery_controller	-	-	-
App	f5	traffix_signaling_delivery_controller	3.3.2	-	-
App	f5	traffix_signaling_delivery_controller	3.4.1	-	-
App	f5	traffix_signaling_delivery_controller	3.5.1	-	-
App	f5	traffix_signaling_delivery_controller	4.1.0	-	-
App	gnu	bash	-	-	-
HW	ibm	flex_system_v7000	-	-	-
OS	ibm	flex_system_v7000_firmware	-	-	-
App	ibm	infosphere_guardium_database_activity_monitoring	8.2	-	-
App	ibm	infosphere_guardium_database_activity_monitoring	9.0	-	-
App	ibm	infosphere_guardium_database_activity_monitoring	9.1	-	-
App	ibm	pureapplication_system	-	-	-
App	ibm	pureapplication_system	2.0.0.0	-	-
App	ibm	qradar_risk_manager	7.1.0	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.0	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.0	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.0	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.1	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.1	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.1	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.1	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.1.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.0	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.0	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.0	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.0	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.1	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.1	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.1	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.1	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.2	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.3	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.3	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.3	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.3	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.3	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.4	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.4	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.4	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.4	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.4	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.4	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.4	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.5	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.5	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.5	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.5	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.5	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.5	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.5	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.6	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.6	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.6	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.6	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.6	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.6	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.6	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.6	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.7	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.7	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.7	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.7	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.7	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.8	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.8	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.8	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.8	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.8	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.8	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.8	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.8	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.8	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.8	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.8	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.8	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.8	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.8	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.8	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.8	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.8	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.8.15	-	-
App	ibm	qradar_security_information_and_event_manager	7.2.9	-	-
App	ibm	qradar_vulnerability_manager	7.2.0	-	-
App	ibm	qradar_vulnerability_manager	7.2.1	-	-
App	ibm	qradar_vulnerability_manager	7.2.2	-	-
App	ibm	qradar_vulnerability_manager	7.2.3	-	-
App	ibm	qradar_vulnerability_manager	7.2.4	-	-
App	ibm	qradar_vulnerability_manager	7.2.6	-	-
App	ibm	qradar_vulnerability_manager	7.2.6	-	-
App	ibm	qradar_vulnerability_manager	7.2.6	-	-
App	ibm	qradar_vulnerability_manager	7.2.6	-	-
App	ibm	qradar_vulnerability_manager	7.2.6	-	-
App	ibm	qradar_vulnerability_manager	7.2.6	-	-
App	ibm	qradar_vulnerability_manager	7.2.6	-	-
App	ibm	qradar_vulnerability_manager	7.2.8	-	-
App	ibm	qradar_vulnerability_manager	7.2.8	-	-
App	ibm	qradar_vulnerability_manager	7.2.8	-	-
App	ibm	qradar_vulnerability_manager	7.2.8	-	-
App	ibm	qradar_vulnerability_manager	7.2.8	-	-
App	ibm	qradar_vulnerability_manager	7.2.8	-	-
App	ibm	qradar_vulnerability_manager	7.2.8	-	-
App	ibm	qradar_vulnerability_manager	7.2.8	-	-
App	ibm	qradar_vulnerability_manager	7.2.8	-	-
App	ibm	qradar_vulnerability_manager	7.2.8	-	-
App	ibm	qradar_vulnerability_manager	7.2.8	-	-
App	ibm	qradar_vulnerability_manager	7.2.8	-	-
App	ibm	qradar_vulnerability_manager	7.2.8	-	-
App	ibm	qradar_vulnerability_manager	7.2.8	-	-
App	ibm	qradar_vulnerability_manager	7.2.8	-	-
App	ibm	qradar_vulnerability_manager	7.2.8	-	-
App	ibm	qradar_vulnerability_manager	7.2.8	-	-
App	ibm	qradar_vulnerability_manager	7.2.8	-	-
HW	ibm	san_volume_controller	-	-	-
OS	ibm	san_volume_controller_firmware	-	-	-
OS	ibm	security_access_manager_for_mobile_8.0_firmware	8.0.0.1	-	-
OS	ibm	security_access_manager_for_mobile_8.0_firmware	8.0.0.2	-	-
OS	ibm	security_access_manager_for_mobile_8.0_firmware	8.0.0.3	-	-
OS	ibm	security_access_manager_for_mobile_8.0_firmware	8.0.0.5	-	-
OS	ibm	security_access_manager_for_web_7.0_firmware	7.0.0.1	-	-
OS	ibm	security_access_manager_for_web_7.0_firmware	7.0.0.2	-	-
OS	ibm	security_access_manager_for_web_7.0_firmware	7.0.0.3	-	-
OS	ibm	security_access_manager_for_web_7.0_firmware	7.0.0.4	-	-
OS	ibm	security_access_manager_for_web_7.0_firmware	7.0.0.5	-	-
OS	ibm	security_access_manager_for_web_7.0_firmware	7.0.0.6	-	-
OS	ibm	security_access_manager_for_web_7.0_firmware	7.0.0.7	-	-
OS	ibm	security_access_manager_for_web_7.0_firmware	7.0.0.8	-	-
OS	ibm	security_access_manager_for_web_8.0_firmware	8.0.0.2	-	-
OS	ibm	security_access_manager_for_web_8.0_firmware	8.0.0.3	-	-
OS	ibm	security_access_manager_for_web_8.0_firmware	8.0.0.5	-	-
App	ibm	smartcloud_entry_appliance	2.3.0	-	-
App	ibm	smartcloud_entry_appliance	2.4.0	-	-
App	ibm	smartcloud_entry_appliance	3.1.0	-	-
App	ibm	smartcloud_entry_appliance	3.2.0	-	-
App	ibm	smartcloud_provisioning	2.1.0	-	-
App	ibm	software_defined_network_for_virtual_environments	-	-	-
App	ibm	software_defined_network_for_virtual_environments	-	-	-
App	ibm	software_defined_network_for_virtual_environments	-	-	-
App	ibm	starter_kit_for_cloud	2.2.0	-	-
HW	ibm	stn6500	-	-	-
OS	ibm	stn6500_firmware	-	-	-
HW	ibm	stn6800	-	-	-
OS	ibm	stn6800_firmware	-	-	-
HW	ibm	stn7800	-	-	-
OS	ibm	stn7800_firmware	-	-	-
HW	ibm	storwize_v3500	-	-	-
OS	ibm	storwize_v3500_firmware	-	-	-
HW	ibm	storwize_v3700	-	-	-
OS	ibm	storwize_v3700_firmware	-	-	-
HW	ibm	storwize_v5000	-	-	-
OS	ibm	storwize_v5000_firmware	-	-	-
HW	ibm	storwize_v7000	-	-	-
OS	ibm	storwize_v7000_firmware	-	-	-
App	ibm	workload_deployer	-	-	-
OS	mageia	mageia	3.0	-	-
OS	mageia	mageia	4.0	-	-
OS	novell	open_enterprise_server	11.0	linux_kernel	-
OS	novell	open_enterprise_server	2.0	linux_kernel	-
App	novell	zenworks_configuration_management	10.3	-	-
App	novell	zenworks_configuration_management	11	-	-
App	novell	zenworks_configuration_management	11.1	-	-
App	novell	zenworks_configuration_management	11.2	-	-
App	novell	zenworks_configuration_management	11.3.0	-	-
OS	opensuse	opensuse	12.3	-	-
OS	opensuse	opensuse	13.1	-	-
OS	opensuse	opensuse	13.2	-	-
OS	oracle	linux	4	-	-
OS	oracle	linux	5	-	-
OS	oracle	linux	6	-	-
OS	qnap	qts	-	-	-
OS	qnap	qts	4.1.1	-	-
OS	qnap	qts	4.1.1	-	-
OS	redhat	enterprise_linux	4.0	-	-
OS	redhat	enterprise_linux	5.0	-	-
OS	redhat	enterprise_linux	6.0	-	-
OS	redhat	enterprise_linux	7.0	-	-
OS	redhat	enterprise_linux_desktop	5.0	-	-
OS	redhat	enterprise_linux_desktop	6.0	-	-
OS	redhat	enterprise_linux_desktop	7.0	-	-
OS	redhat	enterprise_linux_eus	5.9	-	-
OS	redhat	enterprise_linux_eus	6.4	-	-
OS	redhat	enterprise_linux_eus	6.5	-	-
OS	redhat	enterprise_linux_eus	7.3	-	-
OS	redhat	enterprise_linux_eus	7.4	-	-
OS	redhat	enterprise_linux_eus	7.5	-	-
OS	redhat	enterprise_linux_eus	7.6	-	-
OS	redhat	enterprise_linux_eus	7.7	-	-
OS	redhat	enterprise_linux_for_ibm_z_systems	5.9_s390x	-	-
OS	redhat	enterprise_linux_for_ibm_z_systems	6.4_s390x	-	-
OS	redhat	enterprise_linux_for_ibm_z_systems	6.5_s390x	-	-
OS	redhat	enterprise_linux_for_ibm_z_systems	7.3_s390x	-	-
OS	redhat	enterprise_linux_for_ibm_z_systems	7.4_s390x	-	-
OS	redhat	enterprise_linux_for_ibm_z_systems	7.5_s390x	-	-
OS	redhat	enterprise_linux_for_ibm_z_systems	7.6_s390x	-	-
OS	redhat	enterprise_linux_for_ibm_z_systems	7.7_s390x	-	-
OS	redhat	enterprise_linux_for_power_big_endian	5.0_ppc	-	-
OS	redhat	enterprise_linux_for_power_big_endian	5.9_ppc	-	-
OS	redhat	enterprise_linux_for_power_big_endian	6.0_ppc64	-	-
OS	redhat	enterprise_linux_for_power_big_endian	6.4_ppc64	-	-
OS	redhat	enterprise_linux_for_power_big_endian	7.0_ppc64	-	-
OS	redhat	enterprise_linux_for_power_big_endian_eus	6.5_ppc64	-	-
OS	redhat	enterprise_linux_for_power_big_endian_eus	7.3_ppc64	-	-
OS	redhat	enterprise_linux_for_power_big_endian_eus	7.4_ppc64	-	-
OS	redhat	enterprise_linux_for_power_big_endian_eus	7.5_ppc64	-	-
OS	redhat	enterprise_linux_for_power_big_endian_eus	7.6_ppc64	-	-
OS	redhat	enterprise_linux_for_power_big_endian_eus	7.7_ppc64	-	-
OS	redhat	enterprise_linux_for_scientific_computing	6.0	-	-
OS	redhat	enterprise_linux_for_scientific_computing	7.0	-	-
OS	redhat	enterprise_linux_server	5.0	-	-
OS	redhat	enterprise_linux_server	6.0	-	-
OS	redhat	enterprise_linux_server	7.0	-	-
OS	redhat	enterprise_linux_server_aus	5.6	-	-
OS	redhat	enterprise_linux_server_aus	5.9	-	-
OS	redhat	enterprise_linux_server_aus	6.2	-	-
OS	redhat	enterprise_linux_server_aus	6.4	-	-
OS	redhat	enterprise_linux_server_aus	6.5	-	-
OS	redhat	enterprise_linux_server_aus	7.3	-	-
OS	redhat	enterprise_linux_server_aus	7.4	-	-
OS	redhat	enterprise_linux_server_aus	7.6	-	-
OS	redhat	enterprise_linux_server_aus	7.7	-	-
OS	redhat	enterprise_linux_server_from_rhui	5.0	-	-
OS	redhat	enterprise_linux_server_from_rhui	6.0	-	-
OS	redhat	enterprise_linux_server_from_rhui	7.0	-	-
OS	redhat	enterprise_linux_server_tus	6.5	-	-
OS	redhat	enterprise_linux_server_tus	7.3	-	-
OS	redhat	enterprise_linux_server_tus	7.6	-	-
OS	redhat	enterprise_linux_server_tus	7.7	-	-
OS	redhat	enterprise_linux_workstation	5.0	-	-
OS	redhat	enterprise_linux_workstation	6.0	-	-
OS	redhat	enterprise_linux_workstation	7.0	-	-
App	redhat	gluster_storage_server_for_on-premise	2.1	-	-
App	redhat	virtualization	3.4	-	-
OS	suse	linux_enterprise_desktop	11	-	-
OS	suse	linux_enterprise_desktop	12	-	-
OS	suse	linux_enterprise_server	10	-	-
OS	suse	linux_enterprise_server	10	-	-
OS	suse	linux_enterprise_server	11	-	-
OS	suse	linux_enterprise_server	11	-	-
OS	suse	linux_enterprise_server	11	-	-
OS	suse	linux_enterprise_server	11	vmware	-
OS	suse	linux_enterprise_server	12	-	-
OS	suse	linux_enterprise_software_development_kit	11	-	-
OS	suse	linux_enterprise_software_development_kit	12	-	-
App	suse	studio_onsite	1.3	-	-
OS	vmware	esx	4.0	-	-
OS	vmware	esx	4.1	-	-
App	vmware	vcenter_server_appliance	5.0	-	-
App	vmware	vcenter_server_appliance	5.0	-	-
App	vmware	vcenter_server_appliance	5.0	-	-
App	vmware	vcenter_server_appliance	5.1	-	-
App	vmware	vcenter_server_appliance	5.1	-	-
App	vmware	vcenter_server_appliance	5.1	-	-
App	vmware	vcenter_server_appliance	5.5	-	-
App	vmware	vcenter_server_appliance	5.5	-	-

Explore more

Back to dashboard apple CVEs arista CVEs canonical CVEs arx vulnerabilities

What researchers are saying

CVE-2014-6271

Nitin Gavhane[verified]@NitinGavhane_General

This is a general educational post listing historically significant CVEs in a timeline format without providing specific technical details, PoC references, exploit tools, active exploitation claims, or named remediation actions for any of the vulnerabilities.

𝕏 Bug Bounty Writeups 𝕏[verified]@bountywriteupsGeneral

The tweet shares a Medium link that explains the Shellshock vulnerability but does not provide technical details, PoC, exploit code, or patch information.

icpolicy[verified]@icpolicyGeneral

The tweet only mentions CVE‑2014‑6271 as Shellshock, with no further technical, exploit, or patch details provided.

icpolicy[verified]@icpolicyGeneral

The tweet references CVE-2014-6271 as a blind injection vulnerability but offers no actionable details, PoC, exploit, patch, or evidence of active exploitation.

TL;DR CTF with Onurcan[verified]@CtfWithOGGeneral

The tweet notes that CVE‑2014‑6271 (Shellshock) permits arbitrary command injection through HTTP headers but provides no PoC, exploit, patch, or claim of active exploitation.

chaos[verified]@konig0000General

The post is a historical/educational timeline of notable CVEs for bug bounty learning, with no strong PoC, exploit, active exploitation, or specific patch guidance.

Marshal | Cybersecurity[verified]@u83410General

The post outlines a detection‑engineering use case for Shellshock (CVE‑2014‑6271), simulating payload injections across headers and presenting detection queries, without providing PoC code, active exploitation claims, or patches.

Charlie 🍀[verified]@_Charlie_Chang_Exploit

The content references Metasploit exploit modules targeting CVE‑2014‑6271, indicating that functional exploit code is available, but there is no evidence of active attacks or a patch.