CVE-2026-108584: FunnyWolf Viper config hard-coded credentials
Published Oct 11, 2026
·Updated
A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performing a manipulation results in hard-coded credentials. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Affected Software
1 affected component
FunnyWolf Viper<=3.1.11
Event History
Oct 11, 2026
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
FunnyWolf Viper versions up to and including 3.1.11 are affected. The issue involves the /root/viper/.git/config file.
2
Can this be exploited remotely without credentials or user interaction?
Yes. The available vector is network-based, requires low attack complexity, does not require privileges or user interaction, and can be exploited remotely.
3
Is public exploit code available?
Yes. An exploit has been publicly released and may be used in attacks.