CVEsShanghai Xi Yu Ji Zhi TechnologyCVE-2026-120275Published Nov 1, 23:00 · Updated Nov 1, 23:00 UTC
5.5
MediumCVSS 3.1 · from VulDB
CVE-2026-120275
Shanghai Xi Yu Ji Zhi Technology Minimax Code Find os command injection
Minimax Code · OS command injection · CWE-78AffectedMinimax Code
FixNo fix listed yet.
PublishedNov 1, 23:00 · VulDB
ScoredNov 1 · 5.5 · VulDB
Exploit code publicNone known · checked 23:18 UTC
ExploitedNone known · CISA KEV checked 23:19 UTC
What we know
No known exploitation. CISA KEV, checked 23:19 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 23:18 UTC.
An attacker needs network access and an account. CVSS: network, low privileges.
Someone has to open, click or run something first. CVSS: user interaction required.
Description
A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an unknown part of the component Find Command Handler. The manipulation of the argument -exec results in os command injection. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.
From VulDB
Affected and fixed versions
ProductAffectedFixed inMinimax Code0.5.8–
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known