CVE-2026-79574

CVSS 9.8 (critical) · published 2026-09-08

An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message.

Weakness: CWE-94

Source: NVD CVE-2026-79574

References

• https://github.com/fangtang7/CVE/blob/main/mpush/rce.md
• https://github.com/fangtang7/CVE/blob/main/mpush/rce.md

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.