Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-75031

In the interchange/interchange project, a critical remote code execution (RCE) vulnerability was found in the

cve-program · severity unknownCVSS unknownCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-75031

Published

In the interchange/interchange project, a critical remote code execution (RCE) vulnerability was found in the “quick question” admin feature. In default installations arbitrary Perl code can be injected and executed server-side by unauthenticated users. The Perl code normally runs within a Safe container which limits the scope of what it can do, unless the non-default AllowGlobal directive is configured for the catalog being accessed.CTOR]

Read the publisher's advisory

Affected versions, risk and source history

Related advisories and sources

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-75031 · CVE overview and exploitation status

cve-program · CVE-2026-75031

Related changes

Linked by CVE identifier

No related changes are available here.