CVE-2026-85040
ZhongBangKeJi CRMEB Custom Scheduled Task Feature save eval os command injection
CVSS Score
4.7
EPSS Score
0.0%
EPSS Percentile
0th
A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component Custom Scheduled Task Feature. This manipulation of the argument customCode causes os command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Vendor documents this as deliberate debug-only behavior. But isSafePhpCode blacklist offers no real RCE containment.
| CWE | CWE-78 CWE-77 |
| Vendor | zhongbangkeji |
| Product | crmeb |
| Published | Sep 3, 2026 |
| Last Updated | Sep 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for zhongbangkeji crmeb
Be the first to know when new medium vulnerabilities affecting zhongbangkeji crmeb are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
ZhongBangKeJi / CRMEB
6.0
References
vuldb.com: https://vuldb.com/vuln/398300 vuldb.com: https://vuldb.com/vuln/398300/cti vuldb.com: https://vuldb.com/cve/CVE-2026-85040 vuldb.com: https://vuldb.com/submit/887316 github.com: https://github.com/xiaohai12138-1/cve/blob/main/CRMEB/CRMEB%20Backend%20custom%20%20scheduled%20task%20functionality%20%20RCE.md
Credits
🔍 xiaohai12138 (VulDB User)