CVE-2026-7022Disclosure

LOWCVSS 5.5 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in SmythOS sre up to 0.0.15. Affected is the function AgentRuntime of the file packages/core/src/subsystems/AgentManager/AgentRuntime.class.ts of the component HTTP Header Handler. Such manipulation of the argument X-DEBUG-RUN/X-DEBUG-INJ leads to improper authentication. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-287

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
General: 1 classified signal
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification2 categories

Disclosure

266.7%

General

133.3%

Referenced assets3 URLs

By indicator

Full discourse3 posts

CVE@CVEnew167d
Disclosure
CVE-2026-7022 A security vulnerability has been detected in SmythOS sre up to 0.0.15. Affected is the function AgentRuntime of the file packages/core/src/subsystems/AgentManager/Agen… https://www.cve.org/CVERecord?id=CVE-2026-7022
Post summary
The text announces the detection of CVE-2026-7022 in SmythOS versions up to 0.0.15, indicating the affected AgentRuntime function, but provides no additional information on exploits, patches, or active attacks.
00000134
57.3K followersView on X
CVEarity@CVEarity168d
Disclosure
⚡ New CVE Alert: CVE-2026-7022 📊 Severity: 7.3 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-7022 #CVE-2026-7022 #CVE #High #CyberSecurity #InfoSec https://t.co/npuVik2Ik1
Post summary
The tweet announces the new CVE-2026-7022 with a severity rating of 7.3, but provides no additional details on exploitation, patches, or technical characteristics.
0000058
141 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds168d
General
CVE-2026-7022 Remote Code Injection in SmythOS AgentRuntime HTTP Header Handler Versions 0.0.15 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7022
Post summary
The text provides a basic disclosure of CVE-2026-7022 as a remote code injection flaw in SmythOS AgentRuntime but offers no further details such as PoC, exploitation, or mitigation.
0000052
4.0K followersView on X

Explore more

Back to dashboard