Server-Side Template Injection Vulnerability in SolusVM by Soluslabs
CVE-2026-105474

9.4CRITICAL

Key Information:

Vendor

Webpros

Status
Solusvm 2
Vendor
CVE Published:
15 October 2026

What is CVE-2026-105474?

A server-side template injection vulnerability exists in SolusVM version 2 up to 2.0.0-44576, which allows remote authenticated users to execute arbitrary code with root privileges. This issue significantly increases the risk of unauthorized access and control over servers running this software, making it critical for users to update their systems to mitigate potential exploitation.

Affected Version(s)

SolusVM 2 0 <= 2.0.0-44576

References

https://support.solusvm.com/hc/en-us/articles/44057968061...

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Georgii Shutiaev
.