CVE-2020-9478: Rubrik Cdm

High severity, CVSS 8.8. EPSS: 3.1% chance of exploitation in the next 30 days.

An issue was discovered in Rubrik 5.0.3-2296. An OS command injection vulnerability allows an authenticated attacker to remotely execute arbitrary code on Rubrik-managed systems.

Affected products

• Rubrik Cdm: from 5.0.0, up to and including 5.0.4; from 5.1.0, before 5.1.2 (fixed in 5.1.2)

Published 2020-04-13. Last modified 2026-06-17.