CVE-2026-78797
An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary code via the task_id in tasks-lib.lua.
n/a n/a
CVSS
9.8CriticalExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 14 Oct 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.62%Chance of exploitation activity in the next 30 days, higher than 49% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version yet
What fixes it
No source in this snapshot names a fixed version.
Affected versions 1
- n/aaffected: n/aCVE List
References 5
- pastebin.com/zFVpUjxWExploitvia CVE List
- fw.koolcenter.com/iStoreOS/x86_64_efi/Referencevia CVE List
- doc.linkease.com/zh/guide/istoreos/install_vmware.htmlReferencevia CVE List
- github.com/istoreos/istoreosReferencevia CVE List
- github.com/PRISMI-Team/VulnDisclos/blob/main/Routers/iStoreOS/authorized-rce.mdReferencevia CVE List