CVE-2024-27708

Critical · 9.6

CVSS

9.6

EPSS

0.6%

Published

Dec 22, 2025

CISA due date

—

The record

Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src parameter.

Affected packages

Ecosystem	Package	Introduced	Fixed