CVE-2024-45798General

LOWCVSS 9.9 · CRITICAL

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

  • Prioritize remediation for affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. The `arduino-esp32` CI is vulnerable to multiple Poisoned Pipeline Execution (PPE) vulnerabilities. Code injection in `tests_results.yml` workflow (`GHSL-2024-169`) and environment Variable injection (`GHSL-2024-170`). These issue have been addressed but users are advised to verify the contents of the downloaded artifacts.

3.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-20CWE-78CWE-94

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Threat summary

  • Public PoC and exploit tooling are both present
  • 2 mentions across 1 observed day

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-08-29: 2PoC Mentioned / Linked · 2026-08-29: 1Exploit Tool / Code · 2026-08-29: 108-29
Signal classification2 categories
General
150.0%
PoC
150.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • ExploitGrid@exploitgrid
    PoC

    [EXPLOIT] EGE-GH-KAoHwcq [CRITICAL/PoC] Linked: CVE-2024-45798 gha-lab-16bfb18428 🔗 https://exploitgrid.net/exploits/65388b9f-df50-4db3-90d1-9ee35bd095fd

    Post summary

    A PoC for CVE‑2024‑45798 is posted on Exploit Grid with a critical severity tag, but no patch, technical details or active exploitation reports are disclosed.

    1000066
    38 followersView on X
  • ExploitGrid@exploitgrid
    General

    🛡️ ExploitGrid Daily Threat Digest Critical Exploits disclosed today: CVE-2026-46339 CVE-2024-45798 CVE-2025-55182 CVE-2025-57819 CVE-2025-59528 ..🧵👇

    Post summary

    The digest simply enumerates several CVEs without any accompanying proof of concept, exploit details, or mitigation information.

    1000071
    38 followersView on X

Explore more