Add a detection module for CVE-2026-27174 (MajorDoMo unauthenticated RCE, CVSS 10.0) — an unauthenticated attacker can execute arbitrary PHP via the admin console's op=console&command= endpoint due to a missing post-redirect exit. Detection: fingerprint MajorDoMo, then verify code execution by reading /etc/passwd via the console endpoint and matching root:[x*]:0:0: in the response.
Add a detection module for CVE-2026-27174 (MajorDoMo unauthenticated RCE, CVSS 10.0) — an unauthenticated attacker can execute arbitrary PHP via the admin console's op=console&command= endpoint due to a missing post-redirect exit. Detection: fingerprint MajorDoMo, then verify code execution by reading /etc/passwd via the console endpoint and matching root:[x*]:0:0: in the response.