CVE-2020-27887: EyesOfNetwork

High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days.

An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the nmap_binary parameter to lilac/autodiscovery.php.

Affected products

• EyesOfNetwork EyesOfNetwork: from 5.3, up to and including 5.3-8

Published 2020-10-29. Last modified 2026-06-17.