CVE-2024-8504: Vicidial

High severity, CVSS 8.8. EPSS: 76.2% chance of exploitation in the next 30 days.

An attacker with authenticated access to VICIdial as an "agent" can execute arbitrary shell commands as the "root" user. This attack can be chained with CVE-2024-8503 to execute arbitrary shell commands starting from an unauthenticated perspective.

Affected products

• Vicidial Vicidial: version 2.14-917a only

Published 2024-09-10. Last modified 2026-06-17.