What’s Vulnerable › Vulnerabilities
CVE-2016-2363
- Severity: high (CVSS 7.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2016-06-20 · updated 2026-06-17
- Weakness: CWE-264
Description
Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 uses weak permissions for the /var/www/rpc/surun script, which allows local users to obtain root access for unspecified command execution by leveraging access to the nobody account.
Affected products
- Fonality: 12.6, 12.8, 14.1i
References
Get alerted when CVE-2016-2363 or the next vulnerability affects your stack