CVE-2024-6917: RCE in Veribilim Software's Veribase Order Management

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-08-12 · updated 2026-06-17
Weakness: CWE-78

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Veribilim Software Veribase Order Management allows OS Command Injection. This issue affects Veribase Order Management: before v4.010.2.

Affected products

Veribilim Software Veribase Order Management: before 4.010.2 — fixed in 4.010.2

How to fix

Upgrade to a fixed version: Veribilim Software Veribase Order Management 4.010.2. Check the vendor advisory for mitigations.

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1105
https://www.usom.gov.tr/bildirim/tr-24-1105

Get alerted when CVE-2024-6917 or the next vulnerability affects your stack