TI-2026-21883 CVE-2026-27476 · GHSA-2fw7-qxr6-mwq7RustFly 2.0.0 Command Injection via UDP Remote ControlPriority HIGH 81RustFly 2.0.0 contains a command injection vulnerability in its remote UI control mechanism that accepts hex-encoded instructions over UDP port 5005 without proper sanitization.CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.02987 · Published 2026-02-19 · No fix listed CWE-78