Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in PicoClaw up to 0.2.4. Impacted is an unknown function of the file /api/gateway/restart of the component Web Launcher Management Plane. Performing a manipulation results in command injection. It is possible to initiate the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-25 | 1 | General1 |
| 2026-04-26 | 1 | Disclosure1 |
| 2026-05-22 | 1 | General1 |
Sources OffSeq Threat Radar — CVE-2026-6987 Command Injection in PicoClaw RedPacket Security — CVE Alert: CVE-2026-6987 PicoClaw TheHackerWire — CVE-2026-6987 High Vulnerability PicoClaw GitHub Issue #2307
Post summary
The provided text simply lists sources reporting CVE-2026-6987, describing it as a command injection vulnerability in PicoClaw, without offering evidence of PoC, exploit code, active attacks, fixes, or debunking.
🚨 CVE‑2026‑6987 – PicoClaw ≤0.2.4 A command‑injection bug exists in the Web Launcher Management Plane’s /api/gateway/restart endpoint. (CVSS 7.3). Details 👉 https://radar.offseq.com/threat/cve-2026-6987-command-injection-in-picoclaw-3df152f6
Post summary
The post announces a command‑injection flaw in PicoClaw versions up to 0.2.4 with a CVSS of 7.3, but offers no proof of exploitation or patch guidance.
CVE-2026-6987 A vulnerability was detected in PicoClaw up to 0.2.4. Impacted is an unknown function of the file /api/gateway/restart of the component Web Launcher Management Plane. P… https://www.cve.org/CVERecord?id=CVE-2026-6987
Post summary
The post notes CVE-2026-6987’s existence in PicoClaw up to 0.2.4 but lacks detailed technical info, exploitation context, patches, or debunking notes.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | sipeed | picoclaw | - | go | - |