Softaculous before 5.5.7 is affected by a code execution vulnerability because of External Initialization of Trusted Variables or Data Stores. This leads to privilege escalation on the local host.
The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.
| Link | Tags |
|---|---|
| https://www.softaculous.com/board/index.php?tid=17086&title=Softaculous_5.5.7_Launched | release notes vendor advisory |
| https://vulnerable.af | third party advisory |
| https://vulnerable.af/posts/cve-2020-26886/ | exploit third party advisory mitigation |