Exploit discussion active in current signal (3 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A weakness has been identified in Topsec TopACM 3.0. Affected by this vulnerability is an unknown functionality of the file /view/systemConfig/management/nmc_sync.php of the component HTTP Request Handler. Executing a manipulation of the argument template_path can lead to os command injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-14 | 1 | Disclosure1 |
| 2026-03-15 | 3 | Disclosure2Exploit1 |
| 2026-03-16 | 3 | Disclosure2Patch1 |
🚨 CVE-2026-4170 — CVSS 9.8/10 ██████████ A weakness has been identified in Topsec TopACM 3.0. Affected by this vulnerability is an unknown functionality of the... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/cjvsTw9dkK
Post summary
The tweet reports a critical CVE-2026-4170 with a CVSS of 9.8, affecting Topsec TopACM 3.0, and announces that a patch is now available.
🔴 CVE-2026-4170 - Critical A weakness has been identified in Topsec TopACM 3.0. Affected by this vulnerability is an unknown functionality of the file /view/systemConfig/management/nmc_sync.php of the component HTTP... https://www.thehackerwire.com/vulnerability/CVE-2026-4170/ https://t.co/OSorkfoVop
Post summary
The post announces a new critical vulnerability (CVE‑2026‑4170) in Topsec TopACM 3.0, noting the affected file but providing no evidence of exploitation, exploits, or patches.
[CVE-2026-4170: CRITICAL] Critical vulnerability in Topsec TopACM 3.0 discovered in /view/systemConfig/management/nmc_sync.php component. Allows remote OS command injection. Vendor unresponsive to disclosure.#cve,CVE-2026-4170,#cybersecurity https://cvefind.com/CVE-2026-4170
Post summary
CVE-2026-4170 is a critical remote OS command injection flaw discovered in Topsec TopACM 3.0's /view/systemConfig/management/nmc_sync.php component, with no patch or evidence of exploitation reported yet.
CVE-2026-4170 A weakness has been identified in Topsec TopACM 3.0. Affected by this vulnerability is an unknown functionality of the file /view/systemConfig/management/nmc_sync.php o… https://www.cve.org/CVERecord?id=CVE-2026-4170
Post summary
CVE-2026-4170 describes a weakness in Topsec TopACM 3.0 affecting an unknown functionality in /view/systemConfig/management/nmc_sync.php.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4170 - Topsec TopACM HTTP Request nmc_sync.php os command injection Intel Report: https://ift.tt/ge9J5Sk
Post summary
The text announces a newly identified OS command injection flaw (CVE‑2026‑4170) in Topsec TopACM’s nmc_sync.php, with a referenced intel report for more details.
🚨 CVE-2026-4170: Topsec T... Remote RCE via template_path parameter in TopACM's nmc_sync.php - public exploit available and vendor ghosted the disclosure. #RCE #TopACM #0day. https://zerodaysignal.com/vulnerability/CVE-2026-4170 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
A public exploit for CVE‑2026‑4170 has been released, enabling remote code execution via a template_path parameter in TopACM's nmc_sync.php, while the vendor has not addressed the issue.
A new vulnerability with increased severity was disclosed for Topsec TopACM (CVE-2026-4170) https://vuldb.com/?id.351077
Post summary
The post announces the new CVE-2026-4170 vulnerability for Topsec TopACM, noting an increase in severity, but provides no further technical details, PoC, exploit code, or patch information.