4xmen

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

4xmen records in CISA KEV

No 4xmen vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-36753 CVE-2026-49849

xShop: Unrestricted File Upload in File Attachment Module in Admin panel leads to Arbitrary Code Execution

HIGH 74

xShop is an open-source shop developed in Laravel.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00992 Published 2026-08-21 No fix listed CWE-434

TI-2026-50831 CVE-2026-72573 · GHSA-m6fq-fq43-f9v8

4xmen pm2panel - Authenticated OS Command Injection via id Query Parameter

MEDIUM 43

An OS command injection vulnerability in 4xmen/pm2panel (all versions) allows an authenticated remote attacker to execute arbitrary system commands on the host.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01565 Published 2026-08-10 No fix listed CWE-78

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0