VulnSocial

CVE-2026-41315Disclosure(midoks / mdserver-web)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch midoks mdserver-web systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

mdserver-web is a simple Linux panel. From 0.18.0 to 0.18.4, mdserver-web has a front-end unauthorized remote command execution vulnerability. Due to the lack of authentication on the /modify_crond and /start_task interfaces, it is possible to modify the default built-in scheduled tasks and start them, achieving RCE.

midoks CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-78CWE-862

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • mdserver-web

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-05-27); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
midoks
Products
mdserver-web

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-05-27: 1Mentions · 2026-06-01: 1Patch / Workaround · 2026-06-01: 1Technical Details · 2026-05-27: 1Technical Details · 2026-06-01: 105-2706-01
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets1 URL
Classification over time
DateTotalLabels
2026-05-271
Disclosure1
2026-06-011
Patch1
Full discourse2 posts
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 CRITICAL: CVE-2026-41315 (CVSS 9.8) mdserver-web Linux panel v0.18.0-0.18.4 has unauthenticated RCE via /modify_crond & /start_task endpoints. Attackers can modify scheduled tasks remotely. Patch immediately! #CVE #PatchNow https://t.co/jxQghvdq4O

    Post summary

    The tweet highlights a severe unauthenticated RCE in mdserver-web, emphasizes urgent patching, but does not provide proof-of-concept or exploit details.

    0000053
    35 followersView on X
  • DailyCVE@dailycve
    Disclosure

    🔴 mdserver-web, Frontend Unauthorized RCE, #CVE-2026-41315 (Critical) https://dailycve.com/mdserver-web-frontend-unauthorized-rce-cve-2026-41315-critical/

    Post summary

    A new critical vulnerability (CVE-2026-41315) in mdserver-web allows unauthorized remote code execution via the frontend. No PoC, exploit, or mitigation details are provided.

    00000119
    207 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appmidoksmdserver-web---

Explore more

Back to dashboardmidoks CVEsmdserver-web vulnerabilities