Tencent Mass Service Engine in Cluster (MSEC) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Tencent Mass Service Engine in Cluster (MSEC): 1 record(s), with affected versions and fixes.
CVE-2026-89040
Critical · 9.8
CWE-22 Sep 15, 2026
Tencent Mass Service Engine in Cluster (MSEC) path traversal
Tencent Mass Service Engine in Cluster (MSEC) allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target device. An attacker who uploads a webshell can execute arbitrary code as root.