VulnSocial

CVE-2026-45777Disclosure(buffalo / open_xdmod)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch buffalo open_xdmod systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Starting in version 9.5.0 and prior to version 11.0.3, an attacker can remotely execute arbitrary system commands on the web server hosting Open XDMoD with the privileges of the web server process. This could allow an attacker to read or modify application data, alter system configuration, or disrupt service availability. All deployments of Open XDMoD versions 9.5.0 through 11.0.2 (inclusive) are impacted. This issue was reported privately on 2026-04-06, and at this time there is no evidence that this vulnerability has been exploited in the wild. The vulnerability was patched in Open XDMoD 11.0.3 on 2026-05-12. As a workaround, apply the patch manually.

buffalo CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Other references
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • open_xdmod

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-06-06); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
buffalo
Products
open_xdmod

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-06-06: 2Mentions · 2026-07-30: 1Patch / Workaround · 2026-07-30: 1Technical Details · 2026-06-06: 2Technical Details · 2026-07-30: 106-0607-30
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-062
Disclosure2
2026-07-301
Patch1
Full discourse3 posts
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 CRITICAL: CVE-2026-45777 (CVSS 9.8) - OpenXDMoD RCE vulnerability allows unauthenticated remote code execution. Affects versions 9.5.0-11.0.2. Patch to 11.0.3 immediately. No known wild exploitation yet. #CVE #PatchNow https://t.co/ruV8p01YCF

    Post summary

    The tweet alerts about the critical CVE‑2026‑45777 RCE in OpenXDMoD, urges patching to version 11.0.3, and notes that no wild exploitation has been observed.

    0000062
    98 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-45777 OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Starting in version 9.5.0 and prior to version 11.0.3, an attacker can remotely execute arbit… https://www.cve.org/CVERecord?id=CVE-2026-45777

    Post summary

    CVE-2026-45777 identifies a remote code execution flaw in OpenXDMoD versions 9.5.0 to 11.0.3; the notice provides version scope and CVE link but no PoC, exploit code, or patch information.

    00000148
    57.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-45777 Remote Code Execution in Open XDMoD Versions 9.5.0 Through 11.0.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-45777 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3

    Post summary

    CVE-2026-45777 is a remote code execution vulnerability affecting Open XDMoD versions 9.5.0 to 11.0.2, announced via a brief notice and links to vulnerability details.

    0000035
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appbuffaloopen_xdmod---

Explore more

Back to dashboardbuffalo CVEsopen_xdmod vulnerabilities