{"id":"CVE-2026-79574","title":"An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message.","summary":"An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message.","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-94"],"published":"2026-09-08","updated":"2026-09-09","sourceUpdated":"2026-09-09T19:17:48.477","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-79574","references":[{"url":"https://github.com/fangtang7/CVE/blob/main/mpush/rce.md","label":"cve@mitre.org"},{"url":"https://github.com/fangtang7/CVE/blob/main/mpush/rce.md","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"total","timestamp":"2026-09-09T18:47:33.064502Z"},"epss":0.00476,"epssPercentile":0.40195,"ingestedAt":"2026-09-08T15:33:26.988Z","slug":"CVE-2026-79574","body":"## Overview\n\nAn issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":66,"depthScoreParts":{"impact":53.9,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":201983,"id":"CVE-2026-79574","ts":1789399993477,"field":"exploit_available","old":"false","new":"true"},{"seq":201982,"id":"CVE-2026-79574","ts":1789399993477,"field":"cvss","old":null,"new":"9.8"},{"seq":201981,"id":"CVE-2026-79574","ts":1789399993477,"field":"severity","old":"none","new":"critical"},{"seq":200710,"id":"CVE-2026-79574","ts":1789397585547,"field":"exploit_available","old":"true","new":"false"},{"seq":200709,"id":"CVE-2026-79574","ts":1789397585547,"field":"cvss","old":"9.8","new":null},{"seq":200708,"id":"CVE-2026-79574","ts":1789397585547,"field":"severity","old":"critical","new":"none"},{"seq":199408,"id":"CVE-2026-79574","ts":1789395477580,"field":"exploit_available","old":"false","new":"true"},{"seq":199407,"id":"CVE-2026-79574","ts":1789395477580,"field":"cvss","old":null,"new":"9.8"},{"seq":199406,"id":"CVE-2026-79574","ts":1789395477580,"field":"severity","old":"none","new":"critical"},{"seq":198653,"id":"CVE-2026-79574","ts":1789392188242,"field":"exploit_available","old":"true","new":"false"},{"seq":198652,"id":"CVE-2026-79574","ts":1789392188242,"field":"cvss","old":"9.8","new":null},{"seq":198651,"id":"CVE-2026-79574","ts":1789392188242,"field":"severity","old":"critical","new":"none"},{"seq":196984,"id":"CVE-2026-79574","ts":1789384273308,"field":"exploit_available","old":"false","new":"true"},{"seq":196983,"id":"CVE-2026-79574","ts":1789384273308,"field":"cvss","old":null,"new":"9.8"},{"seq":196982,"id":"CVE-2026-79574","ts":1789384273308,"field":"severity","old":"none","new":"critical"},{"seq":194115,"id":"CVE-2026-79574","ts":1789378694075,"field":"exploit_available","old":"true","new":"false"},{"seq":194114,"id":"CVE-2026-79574","ts":1789378694075,"field":"cvss","old":"9.8","new":null},{"seq":194113,"id":"CVE-2026-79574","ts":1789378694075,"field":"severity","old":"critical","new":"none"},{"seq":192902,"id":"CVE-2026-79574","ts":1789376494559,"field":"exploit_available","old":"false","new":"true"},{"seq":192901,"id":"CVE-2026-79574","ts":1789376494559,"field":"cvss","old":null,"new":"9.8"},{"seq":192900,"id":"CVE-2026-79574","ts":1789376494559,"field":"severity","old":"none","new":"critical"},{"seq":191689,"id":"CVE-2026-79574","ts":1789373590433,"field":"exploit_available","old":"true","new":"false"},{"seq":191688,"id":"CVE-2026-79574","ts":1789373590433,"field":"cvss","old":"9.8","new":null},{"seq":191687,"id":"CVE-2026-79574","ts":1789373590433,"field":"severity","old":"critical","new":"none"},{"seq":190474,"id":"CVE-2026-79574","ts":1789369449692,"field":"exploit_available","old":"false","new":"true"},{"seq":190473,"id":"CVE-2026-79574","ts":1789369449692,"field":"cvss","old":null,"new":"9.8"},{"seq":190472,"id":"CVE-2026-79574","ts":1789369449692,"field":"severity","old":"none","new":"critical"},{"seq":189261,"id":"CVE-2026-79574","ts":1789368373497,"field":"exploit_available","old":"true","new":"false"},{"seq":189260,"id":"CVE-2026-79574","ts":1789368373497,"field":"cvss","old":"9.8","new":null},{"seq":189259,"id":"CVE-2026-79574","ts":1789368373497,"field":"severity","old":"critical","new":"none"},{"seq":188044,"id":"CVE-2026-79574","ts":1789365211627,"field":"exploit_available","old":"false","new":"true"},{"seq":188043,"id":"CVE-2026-79574","ts":1789365211627,"field":"cvss","old":null,"new":"9.8"},{"seq":188042,"id":"CVE-2026-79574","ts":1789365211627,"field":"severity","old":"none","new":"critical"},{"seq":186831,"id":"CVE-2026-79574","ts":1789363454996,"field":"exploit_available","old":"true","new":"false"},{"seq":186830,"id":"CVE-2026-79574","ts":1789363454996,"field":"cvss","old":"9.8","new":null},{"seq":186829,"id":"CVE-2026-79574","ts":1789363454996,"field":"severity","old":"critical","new":"none"},{"seq":185617,"id":"CVE-2026-79574","ts":1789361195355,"field":"exploit_available","old":"false","new":"true"},{"seq":185616,"id":"CVE-2026-79574","ts":1789361195355,"field":"cvss","old":null,"new":"9.8"},{"seq":185615,"id":"CVE-2026-79574","ts":1789361195355,"field":"severity","old":"none","new":"critical"},{"seq":184404,"id":"CVE-2026-79574","ts":1789358318987,"field":"exploit_available","old":"true","new":"false"},{"seq":184403,"id":"CVE-2026-79574","ts":1789358318987,"field":"cvss","old":"9.8","new":null},{"seq":184402,"id":"CVE-2026-79574","ts":1789358318987,"field":"severity","old":"critical","new":"none"},{"seq":182655,"id":"CVE-2026-79574","ts":1789354302693,"field":"exploit_available","old":"false","new":"true"},{"seq":182654,"id":"CVE-2026-79574","ts":1789354302693,"field":"cvss","old":null,"new":"9.8"},{"seq":182653,"id":"CVE-2026-79574","ts":1789354302693,"field":"severity","old":"none","new":"critical"},{"seq":181448,"id":"CVE-2026-79574","ts":1789353280120,"field":"exploit_available","old":"true","new":"false"},{"seq":181447,"id":"CVE-2026-79574","ts":1789353280120,"field":"cvss","old":"9.8","new":null},{"seq":181446,"id":"CVE-2026-79574","ts":1789353280120,"field":"severity","old":"critical","new":"none"},{"seq":180241,"id":"CVE-2026-79574","ts":1789350265509,"field":"exploit_available","old":"false","new":"true"},{"seq":180240,"id":"CVE-2026-79574","ts":1789350265509,"field":"cvss","old":null,"new":"9.8"}]}