LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →
Home / Vulnerability Intelligence / CVE-2026-27044

CVE-2026-27044 - Vulnerability Analysis

CriticalCVSS: 9.9

Last Updated: March 25, 2026

TotalSuite Total Poll Lite - Remote Code Inclusion

Published: March 25, 2026Updated: March 25, 2026Remote Exploitable

Overview

TotalSuite Total Poll Lite <= 4.12.0 contains a remote code inclusion caused by improper control of code generation, letting remote attackers execute arbitrary code, exploit requires crafted input.

Severity & Score

Severity: Critical
CVSS Score: 9.9

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest version beyond 4.12.0.

Details

CVE ID
CVE-2026-27044
Severity
Critical
CVSS Score
9.9
Type
file_inclusion
Status
new

CWE

  • CWE-94

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H