CVE-2022-48252: Pi.alert Project Pi.alert

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

The jokob-sk/Pi.Alert fork (before 22.12.20) of Pi.Alert allows Remote Code Execution via nmap_scan.php (scan parameter) OS Command Injection.

Affected products

• Pi.alert Project Pi.alert: version 1.0 only

Published 2023-01-11. Last modified 2026-06-17.