CVE-2024-58287
HighCVSS 8.8Exploitation Probability (EPSS)
High risk89th percentile - higher than 89% of all known CVEs
Summary
reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan engine configuration that allows authenticated attackers to execute arbitrary commands. Attackers can modify the nmap_cmd parameter with malicious base64-encoded payloads to achieve remote code execution during scan engine configuration.
Risk Assessment
An authenticated attacker could execute arbitrary commands on the reNgine server, potentially leading to system compromise and further lateral movement.
Recommendation
Update reNgine to a patched version and restrict permissions for scan engine configuration.
Other vulnerabilities in reNgine
See all- CVE-2026-104584Critical
reNgine up to v2.2.0 and the current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Command Injection via the custom_headers scan engine configuration field in web/reNgine/tasks.py (fetch_url and dir_file_fuzz functions).
- CVE-2026-105487Medium
A vulnerability was found in yogeshojha reNgine up to 2.2.0 in the subdomain_discovery function of web/reNgine/tasks.py within the listTargets Endpoint component. Manipulation of the Name argument results in OS command injection. The attack can be launched remotely and the exploit has been made public.
- CVE-2026-92570Medium
An authorization bypass vulnerability in reNgine through 2.2.0 in the GetFileContents API endpoint allows any authenticated user to read bundled recon tool configuration files. Low-privilege Auditor roles can access files containing third-party API keys for services like SecurityTrails, Shodan, Censys, VirusTotal, BinaryEdge and Hunter.
Original NVD description (English source)
reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan engine configuration that allows authenticated attackers to execute arbitrary commands. Attackers can modify the nmap_cmd parameter with malicious base64-encoded payloads to achieve remote code execution during scan engine configuration.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS