CVE-2026-105474: SolusVM SolusVM 2 vulnerability

Q: Who can exploit this issue?

Remote authenticated users of SolusVM 2 can exploit it. The provided information does not identify any required role or privilege level beyond authentication.

Q: What level of access could exploitation provide?

Successful exploitation allows arbitrary code execution as root on the affected system.

Q: Which versions are affected?

SolusVM 2 versions up to and including 2.0.0-44576 are affected.

Published Oct 15, 2026

Updated

A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.

Affected Software

1 affected component

SolusVM SolusVM 2<=2.0.0-44576

Event History

Oct 15, 2026

CVE Published

via MITRE·03:27 PM

Data Sourced

via MITRE·03:27 PM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

Remote authenticated users of SolusVM 2 can exploit it. The provided information does not identify any required role or privilege level beyond authentication.

What level of access could exploitation provide?

Successful exploitation allows arbitrary code execution as root on the affected system.

Which versions are affected?

SolusVM 2 versions up to and including 2.0.0-44576 are affected.