🔐 CVE Alert

CVE-2026-75031

UNKNOWN 0.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

In the interchange/interchange project, a critical remote code execution (RCE) vulnerability was found in the “quick question” admin feature. In default installations arbitrary Perl code can be injected and executed server-side by unauthenticated users. The Perl code normally runs within a Safe container which limits the scope of what it can do, unless the non-default AllowGlobal directive is configured for the catalog being accessed.CTOR]

CWE CWE-94
Vendor interchange
Product interchange
Published Sep 18, 2026
Stay Ahead of the Next One

Get instant alerts for interchange interchange

Be the first to know when new unknown vulnerabilities affecting interchange interchange are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Interchange / Interchange
0 < *

References

NVD ↗ CVE.org ↗ EPSS Data ↗
interchangecommerce.org: https://www.interchangecommerce.org/i/dev/news?mv_arg=00071 github.com: https://github.com/interchange/interchange/commit/65b6ea9d3761dd1fd2071c962819562afa335e4e