CVE-2023-47356

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-07-17 · updated 2026-06-17
Weakness: CWE-77

Description

Mingyu Security Gateway before v3.0-5.3p was discovered to contain a remote command execution (RCE) vulnerability via the log_type parameter at /log/fw_security.mds.

References

https://gist.github.com/night-0p/8d414bfef1cb16539da67e122d91e8da
https://github.com/night-0p/anh/blob/main/MingyuSecurityGateway/rce1.md

Get alerted when CVE-2023-47356 or the next vulnerability affects your stack