medium
advisory
EITS Admin Dashboard: Remote code execution (CVE-2026-31367)
A proof-of-concept exploit has been published for CVE-2026-31367, an unauthenticated remote code execution vulnerability in EITS Admin Dashboard v2.4.0 involving an input sanitization flaw in the /api/v1/debug endpoint.
CVE search metadata
CVE search record: CVE-2026-31367. KEV: no. Product: Admin Dashboard v2.4.0. Brief: EITS Admin Dashboard: Remote code execution (CVE-2026-31367). Brief link: https://feed.craftedsignal.io/briefs/2026-10-eits-admin-rce/
Triage facts
Revision 1- Applicability
- Admin Dashboard v2.4.0
- Evidence
- Unknown
- Severity
- Medium
- Sources
- 2 public sources
- Freshness
- Revision 1Oct 29, 10:02 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- C3Roughly even chance