VulnSocial

CVE-2026-4591Disclosure

LOWCVSS 2.0 · LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A weakness has been identified in kalcaddle kodbox 1.64. This affects the function checkBin of the file /workspace/source-code/plugins/fileThumb/app.php of the component fileThumb Endpoint. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-77CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-03-23: 2Technical Details · 2026-03-23: 203-23
Signal classification1 categories
Disclosure
2100.0%
Referenced assets3 URLs
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-4591 OS Command Injection in Kalcaddle Kodbox 1.64 via Filemanager Endp... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4591 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    The tweet announces an OS command injection vulnerability (CVE-2026-4591) in Kalcaddle Kodbox 1.64 and directs readers to a Vulmon page for additional details.

    0001054
    4.0K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4591 - kalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection Intel Report: https://ift.tt/oscSQIO

    Post summary

    The alert announces CVE-2026-4591, identifying a command injection flaw in the kalcaddle kodbox fileThumb endpoint, but does not provide any PoC, exploit code, active exploitation evidence, patch, or debunking information.

    0000027
    289 followersView on X

Explore more

Back to dashboard