Rengine vulnerabilities
Published CVEs affecting Rengine products: 1 record(s), with severity, exploitation and fixes.
CVE-2024-58287
High · 8.8
CWE-78 Dec 11, 2025
reNgine 2.2.0 Authenticated Command Injection via Scan Engine Configuration
reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan engine configuration that allows authenticated attackers to execute arbitrary commands. Attackers can modify the nmap_cmd parameter with malicious base64-encoded payloads to achieve remote code execution during scan engine configuration.