Cpe:2.3:a:modsetter:surfsense:*:*:*:*:*:*:*:*

MODSetter SurfSense up to version 2.0.3 is vulnerable to remote command injection via the MCP Connector Integration component, allowing unauthenticated attackers to execute arbitrary system commands.