CVE-2026-44887Patch

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Alert's web-based configuration editor allows arbitrary Python code to be injected into pialert.conf. Since the background scan daemon loads this file via Python's exec(), injected code executes as the daemon process. With web protection disabled (the default configuration), no authentication is required, making this an unauthenticated Remote Code Execution vulnerability. This vulnerability is fixed in 2026-05-07.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Referenced assets1 URL

By indicator

https://secalerts.co/vulnerability/CVE-2026-44887

Full discourse1 post

SecAlerts@SecAlertsCo137d
Patch
CVE-2026-44887: Critical (9.8) unauthenticated RCE in Pi.Alert. Attackers can inject arbitrary Python code via the web config editor, no credentials needed. If you're running Pi.Alert, update immediately. #NetworkSecurity #RCE https://secalerts.co/vulnerability/CVE-2026-44887 https://t.co/vOp8JkboSL
Post summary
CVE-2026-44887 is a critical, unauthenticated remote code execution vulnerability in Pi.Alert that allows attackers to inject arbitrary Python code via the web config editor. Users are urged to update immediately to mitigate the risk.
0000097
831 followersView on X

Explore more

Back to dashboard