Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
MajorDoMo (aka Major Domestic Module) allows unauthenticated remote code execution via the admin panel's PHP console feature. An include order bug in modules/panel.class.php causes execution to continue past a redirect() call that lacks an exit statement, allowing unauthenticated requests to reach the ajax handler in inc_panel_ajax.php. The console handler within that file passes user-supplied input from GET parameters (via register_globals) directly to eval() without any authentication check. An attacker can execute arbitrary PHP code by sending a crafted GET request to /admin.php with ajax_panel, op, and command parameters.
Priority
HIGH
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-02-18 | 1 | Disclosure1 |
| 2026-02-19 | 2 | Disclosure1Patch1 |
| 2026-04-20 | 1 | Active Exploitation1 |
| 2026-04-21 | 1 | Disclosure1 |
| 2026-05-05 | 2 | Disclosure2 |
| 2026-05-07 | 2 | Disclosure1General1 |
Critical MajorDoMo RCE (CVE-2026-27174): Unauthenticated Remote Code Execution Analysis https://www.resecurity.com/blog/article/critical-majordomo-rce-cve-2026-27174-unauthenticated-remote-code-execution-analysis
Post summary
The referenced article discloses CVE‑2026‑27174, an unauthenticated remote code execution vulnerability in MajorDoMo, and provides detailed analysis of the exploit path.
🚨 CVE-2026-27174 - critical 🚨 MajorDoMo - Unauthenticated RCE > MajorDoMo contains a remote code execution caused by an include order bug and lack of... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-27174 @pdnuclei #NucleiTemplates #cve
Post summary
The tweet announces CVE-2026-27174, describing it as a critical unauthenticated RCE in MajorDoMo and provides a link likely containing more technical details or a PoC.
Caught in the @VulnCheckAI canary network: attackers exploiting CVE-2026-27174 (Majordomo) with textbook Metasploit php/meterpreter/reverse_tcp payloads. Source: 146.70.124[.]214 (Romania) calling back to 51.159.195[.]33:4047
Post summary
The post reports real‑world exploitation of CVE‑2026‑27174 using a Metasploit module, indicating active attacks but no mention of patches or false claims.
『MajorDoMo is important because it often acts as the central controller for an entire smart-home or automation environment.』 Critical MajorDoMo RCE (CVE-2026-27174): Unauthenticated Remote Code Execution Analysis https://www.resecurity.com/blog/article/critical-majordomo-rce-cve-2026-27174-unauthenticated-remote-code-execution-analysis
Post summary
The article announces a newly discovered unauthenticated RCE vulnerability (CVE‑2026‑27174) in MajorDoMo, providing analysis remarks but no PoC, exploit evidence, patch, or active exploitation claims.
🚨 CRITICAL RCE flaw in MajorDoMo puts home automation at risk! Unauthenticated attackers can run code remotely. European orgs: restrict access & patch ASAP. Full compromise possible if unmitigated. Details: https://radar.offseq.com/threat/cve-2026-27174-improper-control-of-gen... https://t.co/z6zT55bppz
Post summary
The post highlights a critical remote‑code‑execution vulnerability in MajorDoMo and urges immediate patching, with no indication of active exploitation or a proof‑of‑concept.
Critical RCE vulnerability (CVE-2026-27174) found in MajorDoMo smart home platform. Immediate action required to secure systems. Link: https://thedailytechfeed.com/critical-rce-vulnerability-found-in-majordomo-smart-home-platform-users-urged-to-secure-systems-immediately/ #CyberSecurity #RCE #Vulnerability #CVE2026 #MajorDoMo #SmartHome #IoT #Exploitation #Security #Patch #Mitigation #Threat #Risk #Firmware #Network #Automation #Breach #Infosec #Alert #Protection
Post summary
The post announces a critical RCE vulnerability (CVE-2026-27174) affecting MajorDoMo, urging immediate action, but it lacks details on patches, PoC, or exploitation evidence.
CVE-2026-27174 Unauthenticated Remote Code Execution in MajorDoMo Admin Panel via PHP Console https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-27174
Post summary
The entry announces CVE-2026-27174, detailing an unauthenticated RCE vulnerability in the MajorDoMo admin panel via PHP console, but provides no PoC, exploit code, or mitigation information.
ثغرة خطيرة في MajorDoMo (CVE-2026-27174): تحليل لتنفيذ التعليمات البرمجية عن بُعد دون مصادقة. A critical vulnerability in MajorDoMo (CVE-2026-27174) has been identified, enabling unauthenticated remote code execution. Dive into the detailed analysis here: https://www.resecurity.com/blog/article/critical-majordomo-rce-cve-2026-27174-unauthenticated-remote-code-execution-analysis #CyberSecurity #VulnerabilityAnalysis #MajorDoMo
Post summary
A critical unauthenticated remote code execution vulnerability, CVE-2026-27174, has been identified in MajorDoMo; the post provides technical analysis but no PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-27174 MajorDoMo (aka Major Domestic Module) allows unauthenticated remote code execution via the admin panel's PHP console feature. An include order bug in modules/panel.cl… https://www.cve.org/CVERecord?id=CVE-2026-27174
Post summary
The CVE-2026-27174 vulnerability in MajorDoMo enables unauthenticated remote code execution through the admin panel's PHP console due to an include order bug. No evidence of active exploitation, PoC, or patch information is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mjdm | majordomo | - | - | - |