CVE-2024-5407: Saltos Rhinos

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability in RhinOS 3.0-1190 could allow PHP code injection through the "search" parameter in /portal/search.htm. This vulnerability could allow a remote attacker to perform a reverse shell on the remote system, compromising the entire infrastructure.

Affected products

• Saltos Rhinos: version 3.0 only

Published 2024-05-27. Last modified 2026-06-17.