CVE-2026-27182
HIGH EPSS 64.6%
Published Feb 18, 20264mo ago · Modified Apr 15, 20262mo ago
8.6 CVSS 4.0
Published Feb 18, 2026 4mo ago
Last Modified Apr 15, 2026 2mo ago
Description
Saturn Remote Mouse Server contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending specially crafted UDP JSON frames to port 27000. Attackers on the local network can send malformed packets with unsanitized command data that the service forwards directly to OS execution functions, enabling remote code execution under the service account.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X
Threat Intelligence
EPSS Exploit Probability
64.6% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-306 Missing Authentication for Critical Function Authentication
References 3
- packetstorm.news https://packetstorm.news/files/id/215835/
- saturnremote.com https://www.saturnremote.com/
- vulncheck.com https://www.vulncheck.com/advisories/saturn-remote-mouse-server-udp-command-injection-rce
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.