Home / Vulnerability Intelligence / CVE-2026-30281

CVE-2026-30281 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: April 1, 2026

MaruNuri LLC - Arbitrary File Overwrite

Published: March 31, 2026Updated: April 1, 2026Remote Exploitable

Overview

MaruNuri LLC v2.0.23 contains an arbitrary file overwrite vulnerability caused by the file import process, letting attackers overwrite critical internal files leading to code execution or information exposure, exploit requires no special conditions.

Severity & Score

Severity: Critical

CVSS Score: 9.8

EPSS Score: 1.8%(Probability of exploitation in next 30 days)

Impact

Attackers can overwrite critical files, leading to arbitrary code execution or exposure of sensitive information.

Mitigation

Update to the latest version.

References

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

Apr 2, 2026

🔴 CVE-2026-30281 - Critical (9.8) An arbitrary file overwrite vulnerability in MaruNuri LLC v2.0.23 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-30281/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

TheHackerWire

@thehackerwire

Apr 2, 2026

View original post

Related Resources

Details

CVE ID: CVE-2026-30281
Severity: Critical
CVSS Score: 9.8
Type: file_inclusion
Status: unconfirmed
EPSS: 1.8%
Social Posts: 2

CWE

CWE-73

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

1.8%Probability of exploitation in the next 30 days