CVE-2019-18869: Blaauwproducts Remote Kiln Control

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Leftover Debug Code in Blaauw Remote Kiln Control through v3.00r4 allows a user to execute arbitrary php code via /default.php?idx=17.

Affected products

• Blaauwproducts Remote Kiln Control: before 3.0.0 (fixed in 3.0.0); version 3.0.0 only

Published 2020-05-07. Last modified 2026-06-17.