CVE-2026-28790Disclosure(olivetin / olivetin)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.0, OliveTin allows an unauthenticated guest to terminate running actions through KillAction even when authRequireGuestsToLogin: true is enabled. Guests are correctly blocked from dashboard access, but can still call the KillAction RPC directly and successfully stop a running action. This is a broken access control issue that causes unauthorized denial of service against legitimate action executions. This issue has been patched in version 3000.11.0.

olivetin CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/OliveTin/OliveTin/commit/d9804182eae43cf49f735e6533ddbe1541c2b9a9

Exploit / PoC references

Other references

https://github.com/OliveTin/OliveTin/releases/tag/3000.11.0

Weakness type (CWE)

CWE-284CWE-862CWE-863

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

olivetin

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-03-05); latest day: 1
3 total mentions across 2 days

Affected systems

Vendors

olivetin

Products

olivetin

Deep dive

Activity timeline3 mentions / 2d

Signal classification2 categories

Disclosure

266.7%

General

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-05	2	Disclosure1General1
2026-03-06	1	Disclosure1

Full discourse3 posts

Vulmon Vulnerability Feed@VulmonFeeds219d
Disclosure
CVE-2026-28790 Unauthenticated Action Termination Vulnerability in OliveTin Before 3000.11.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-28790
Post summary
The text announces CVE‑2026‑28790, describing an unauthenticated action termination flaw in OliveTin versions before 3000.11.0, without providing PoC, exploit code, or patch information.
0000062
4.0K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash219d
General
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-28790 Intel Report: https://ift.tt/gONcCVw
Post summary
A brief threat alert referencing CVE-2026‑28790 with a link to an Intel report; no additional details about exploitation, patches, or technical specifics are included.
0000036
343 followersView on X
CVE@CVEnew219d
Disclosure
CVE-2026-28790 OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.0, OliveTin allows an unauthenticated guest to terminate running act… https://www.cve.org/CVERecord?id=CVE-2026-28790
Post summary
The post announces CVE‑2026‑28790, noting that OliveTin versions prior to 3000.11.0 permit unauthenticated users to terminate running actions through its web interface.
0000071
56.6K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	olivetin	olivetin	-	-	-

Explore more

Back to dashboard olivetin CVEs olivetin vulnerabilities