Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
OliveTin gives access to predefined shell commands from a web interface. In 3000.10.2 and earlier, OliveTin’s live EventStream broadcasts execution events and action output to authenticated dashboard subscribers without enforcing per-action authorization. A low-privileged authenticated user can receive output from actions they are not allowed to view, resulting in broken access control and sensitive information disclosure.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-11 | 1 | Disclosure1 |
| 2026-06-28 | 1 | Active Exploitation1 |
Some increased actor activities are shown targeting OliveTin (CVE-2026-32102) https://vuldb.com/vuln/350594/cti
Post summary
The post reports that attackers are actively targeting OliveTin's CVE-2026-32102, indicating ongoing exploitation activity.
CVE-2026-32102 OliveTin gives access to predefined shell commands from a web interface. In 3000.10.2 and earlier, OliveTin’s live EventStream broadcasts execution events and action … https://www.cve.org/CVERecord?id=CVE-2026-32102
Post summary
The post announces CVE‑2026‑32102 and gives a brief technical description of the issue, but does not provide evidence of active exploitation, a PoC, or a patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | olivetin | olivetin | - | - | - |