Amir@itsamirhn
General
CVE-2026-55477 7.2 / High
Post summary
The text only lists CVE-2026-55477 with a score of 7.2/High, providing no further technical, exploit, or mitigation details.
00040162
700 followersView on X
CVE-2026-55477General
LOWCVSS 7.2 · HIGHSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
3X-UI is a web control panel for managing Xray-core servers. Prior to 3.3.1, an authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leveraged to obtain code execution and persistent access as the user running Xray (including root when Xray is running as root). This vulnerability is fixed in 3.3.1.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-73
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
Threat summary
- 2 mentions across 2 observed days
- Momentum state: stable
What's happening
- Technical details provided in 1 signal
- General: 1 classified signal
- Disclosure: 1 classified signal
- Peaked 1d ago at 1 mentions (2026-07-08); latest day: 1
- 2 total mentions across 2 days
Deep dive
Activity timeline2 mentions / 2d
Signal classification2 categories
General150.0%
Disclosure150.0%
Referenced assets1 URL
Classification over time
| Date | Total | Labels |
|---|
| 2026-07-08 | 1 | General1 |
| 2026-08-25 | 1 | Disclosure1 |
Full discourse2 posts
DailyCVE@dailycveDisclosure🔴 3X-UI, Authenticated Arbitrary File Write, #CVE-2026-55477 (High) -DC-Aug2026-1849 https://dailycve.com/3x-ui-authenticated-arbitrary-file-write-cve-2026-55477-high-dc-aug2026-1849/
Post summary
The snippet announces CVE‑2026‑55477, a high‑severity authenticated arbitrary file write flaw in 3X‑UI, and provides a link to additional details.
0000035231 followersView on X