Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Saturn Remote Mouse Server contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending specially crafted UDP JSON frames to port 27000. Attackers on the local network can send malformed packets with unsanitized command data that the service forwards directly to OS execution functions, enabling remote code execution under the service account.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-27182 Unauthenticated Remote Code Execution in Saturn Remote Mouse Server via UDP JSON Injection https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-27182
Post summary
The post announces CVE-2026-27182, describing an unauthenticated remote code execution vulnerability in Saturn Remote Mouse Server that exploits UDP JSON injection.
🚨 CVE-2026-27182 (CVSS 9.3): Saturn Remote Mouse Server command injection → unauth RCE via crafted input. IoT mouse takeover! https://feedly.com/cve/severity/8-9?page=7
Post summary
The text announces CVE-2026-27182, a high‑severity command injection flaw in Saturn Remote Mouse Server that allows unauthenticated remote code execution in IoT mouse devices.
CVE-2026-27182 Saturn Remote Mouse Server contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending specially crafted… https://www.cve.org/CVERecord?id=CVE-2026-27182
Post summary
A command injection flaw in Saturn Remote Mouse Server enables unauthenticated attackers to execute arbitrary commands; no PoC, exploit code, or patch details are provided.