CVE-2020-27575: Maxum Rumpus

High severity, CVSS 8.8. EPSS: 3.1% chance of exploitation in the next 30 days.

Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functionality in which administrators are able to manage users. The edit users form contains a parameter vulnerable to command injection due to insufficient validation.

Affected products

  • Maxum Rumpus: version 8.2.13 only; version 8.2.14 only

Published 2021-03-08. Last modified 2026-07-09.