{"id":"CVE-2026-104586","title":"AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.","summary":"AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.","severity":"critical","published":"2026-10-15","updated":"2026-10-15","sourceUpdated":"2026-10-15T15:17:21.067","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-104586","references":[{"url":"https://github.com/AmalJafarzade/CVE-2026-104586","label":"cve@mitre.org"},{"url":"https://github.com/AnoopAlias/AUTOM8N","label":"cve@mitre.org"}],"tags":["nvd","exploit-available","cve.org"],"exploits":{"github":1,"githubRepos":["https://github.com/AmalJafarzade/CVE-2026-104586"],"checkedAt":"2026-10-27T16:54:08.057Z"},"exploitAvailable":true,"ingestedAt":"2026-10-15T15:09:08.434Z","epss":0.01526,"epssPercentile":0.7455,"cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"total","timestamp":"2026-10-20T02:29:28.652277Z"},"cvssSource":"adp","slug":"CVE-2026-104586","body":"## Overview\n\nAUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":66,"depthScoreParts":{"impact":53.9,"likelihood":0.3,"exploitation":12,"ransomware":0},"changes":[{"seq":225315,"id":"CVE-2026-104586","ts":1792464718436,"field":"cvss","old":null,"new":"9.8"},{"seq":225314,"id":"CVE-2026-104586","ts":1792464718436,"field":"severity","old":"none","new":"critical"}]}