CVE-2020-15920: Midasolutions Eframework

Critical severity, CVSS 9.8. EPSS: 98.2% chance of exploitation in the next 30 days.

There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. No authentication is required.

Affected products

• Midasolutions Eframework: up to and including 2.9.0

Published 2020-07-24. Last modified 2026-06-17.