CVE-2026-75031

In the interchange/interchange project, a critical remote code execution (RCE) vulnerability was found in the “quick question” admin feature. In default installations arbitrary Perl code can be injected and executed server-side by unauthenticated users. The Perl code normally runs within a Safe container which limits the scope of what it can do, unless the non-default AllowGlobal directive is configured for the catalog being accessed.CTOR]

• CWE-94

• https://github.com/interchange/interchange/commit/65b6ea9d3761dd1fd2071c962819562afa335e4e
• https://www.interchangecommerce.org/i/dev/news?mv_arg=00071

Published

Sep 18, 2026

Last Modified

Sep 18, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-75021fastify-cli starts the Node.js Inspector when a debug flag i…8.1
• CVE-2026-75025Mattermost Desktop App versions <=6.2 6.2.2.0 Fixed an issue…4.7
• CVE-2026-75027The Themify Builder plugin for WordPress is vulnerable to au…5.3
• CVE-2026-75029In a query response, an attacker may send `named` multiple c…5.3
• CVE-2026-7503A vulnerability was detected in code-projects for Plugin 4.1…8.8
• CVE-2026-75030Missing Authorization vulnerability in Apache Syncope. An…9.8
• CVE-2026-75032A flaw was found in BlueZ. Insufficient validation of packet…6.3
• CVE-2026-75033A flaw was found in Rancher Manager. Project Secrets were pr…7.7
• CVE-2026-75034A flaw was found in Rancher Manager. The SAML assertion repl…7.4
• CVE-2026-75035A flaw was found in Rancher Manager. When a non-administrati…6.5
• CVE-2026-75036A security vulnerability was discovered in Fleet's Helm temp…5.3
• CVE-2026-75037Polkit Authentication Based on UnixProcessSubject / Peer PID…7