Read the docs

sergejey

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

sergejey records in CISA KEV

No sergejey vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Majordomo 9 records HIGH

Records

9 records

TI-2026-21622 CVE-2026-27180 · GHSA-grp8-p6j9-9x5f

MajorDoMo Supply Chain Remote Code Execution via Update URL Poisoning

Priority MEDIUM 50

MajorDoMo (aka Major Domestic Module) is vulnerable to unauthenticated remote code execution through supply chain compromise via update URL poisoning.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01198 Published 2026-02-18 No fix listed CWE-494
TI-2026-21621 CVE-2026-27179 · GHSA-w366-h875-fm53

MajorDoMo Unauthenticated SQL Injection in Commands Module

Priority MEDIUM 45

MajorDoMo (aka Major Domestic Module) contains an unauthenticated SQL injection vulnerability in the commands module.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00527 Published 2026-02-18 No fix listed CWE-89
TI-2026-21619 CVE-2026-27177 · GHSA-c59q-pmw5-v3pf

MajorDoMo Stored Cross-Site Scripting via Property Set Endpoint

Priority LOW 29

MajorDoMo (aka Major Domestic Module) contains a stored cross-site scripting (XSS) vulnerability via the /objects/?op=set endpoint, which is intentionally unauthenticated for IoT device integration.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00229 Published 2026-02-18 No fix listed CWE-79
TI-2026-21618 CVE-2026-27176 · GHSA-rpq9-4jjf-2xhh

MajorDoMo Reflected Cross-Site Scripting in command.php

Priority LOW 24

MajorDoMo (aka Major Domestic Module) contains a reflected cross-site scripting (XSS) vulnerability in command.php.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.005 Published 2026-02-18 No fix listed CWE-79
Open these records in search →