Bixat vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Bixat products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-27476 Critical · 9.8 CWE-78 Feb 19, 2026

RustFly 2.0.0 Command Injection via UDP Remote Control

RustFly 2.0.0 contains a command injection vulnerability in its remote UI control mechanism that accepts hex-encoded instructions over UDP port 5005 without proper sanitization. Attackers can send crafted hex-encoded payloads containing system commands to execute arbitrary operations on the target system, including reverse shell establishment and command execution.