{"id":"CVE-2016-15057","published":"2026-01-26T11:29:03Z","modified":"2026-01-26T18:06:06Z","title":"Apache Continuum: Command injection leading to RCE","vendor":"Apache Software Foundation","product":"Apache Continuum","tier":"core","eol":null,"affectedVersions":[{"vendor":"Apache Software Foundation","product":"Apache Continuum","versions":["all versions"]}],"description":{"text":"** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Continuum.\n\nThis issue affects Apache Continuum: all versions.\n\nAttackers with access to the installations REST API can use this to invoke arbitrary commands on the server.\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.","provenance":"source","from":"CVE.org"},"summary":{"text":"Apache Continuum, from the Apache Software Foundation, contains a command injection flaw (CWE: improper neutralization of special elements used in a command) affecting all versions of the product, which is retired and will not receive a fix. An attacker with access to the installation's REST API can exploit it to run arbitrary commands on the server, requiring network access to that API and low-privileged authentication, with no user interaction needed.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T08:31:47Z"},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.03888,"percentile":0.90199,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2026-01-26","exploitedFirstSeen":"2026-01-26","ransomware":false,"evidence":[{"url":"https://www.vulncheck.com/advisories/apache-continuum-code-execution-via-saveinstallation-action","date":"2026-01-26"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":32,"pulses":[{"name":"Known_Cve | Mar 31, 2026 | Part 1/2","url":"https://otx.alienvault.com/pulse/69ca8513b66a6dde3b8bc51d","created":"2026-03-30"},{"name":"Known_Cve | Mar 30, 2026 | Part 2/2","url":"https://otx.alienvault.com/pulse/69ca0daa0d61a3082fccd483","created":"2026-03-30"},{"name":"Known_Cve | Mar 30, 2026 | Part 2/2","url":"https://otx.alienvault.com/pulse/69c932c178f05822e0970ce2","created":"2026-03-29"},{"name":"Known_Cve | Mar 28, 2026 | Part 2/3","url":"https://otx.alienvault.com/pulse/69c69277127fedcfcf9349b0","created":"2026-03-27"},{"name":"Known_Cve | Mar 25, 2026 | Part 1/2","url":"https://otx.alienvault.com/pulse/69c2a5852b497ad2dfee0e56","created":"2026-03-24"},{"name":"Known_Cve | Mar 24, 2026 | Part 1/2","url":"https://otx.alienvault.com/pulse/69c14ad09114b91e2b796d1f","created":"2026-03-23"},{"name":"Known_Cve | Mar 23, 2026 | Part 1/2","url":"https://otx.alienvault.com/pulse/69bff7a467e13e64faf0c7a5","created":"2026-03-22"},{"name":"Known_Cve | Mar 22, 2026 | Part 1/2","url":"https://otx.alienvault.com/pulse/69bea7172a5f67c1be686cbd","created":"2026-03-21"},{"name":"Known_Cve | Mar 21, 2026 | Part 1/2","url":"https://otx.alienvault.com/pulse/69bd561efca225ea63938eb5","created":"2026-03-20"},{"name":"Known_Cve | Mar 20, 2026 | Part 1/2","url":"https://otx.alienvault.com/pulse/69bc05085c2ed0bd9d103e85","created":"2026-03-19"}],"provenance":"machine"},"cwes":[{"id":"CWE-77","name":"Improper Neutralization of Special Elements used in a Command"}],"references":[{"url":"https://lists.apache.org/thread/hbvf1ztqw2kv51khvzm5nk3mml3nm4z1","tags":["vendor-advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/01/26/1","tags":[]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"Maven","package":"org.apache.continuum:continuum","vulnerableRanges":["<=1.4.2"],"patched":[],"from":["GHSA-77p9-w6pj-rmvg"],"provenance":"source"}],"advisories":[{"id":"GHSA-77p9-w6pj-rmvg","url":"https://github.com/advisories/GHSA-77p9-w6pj-rmvg","severity":"CRITICAL","ecosystem":"Maven","package":"org.apache.continuum:continuum","vulnerableRanges":["<=1.4.2"],"patched":[],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2016-10802","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-10802","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"metasploit":[{"name":"Apache Continuum Arbitrary Command Execution","module":"exploit/linux/http/apache_continuum_cmd_exec","type":"exploit","disclosureDate":"2016-04-06","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_continuum_cmd_exec.rb"}],"first":{"date":"2016-04-06","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_continuum_cmd_exec.rb"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2016-04-06","kind":"exploit-public","label":"First public exploit: Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_continuum_cmd_exec.rb","provenance":"source"},{"date":"2026-01-26","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2016-15057","provenance":"source"},{"date":"2026-01-26","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.vulncheck.com/advisories/apache-continuum-code-execution-via-saveinstallation-action","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":73.0,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":5.0,"detail":"added 276 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":18.04,"detail":"percentile 0.9020"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"32 pulses"},{"name":"CVSS severity","points":6.93,"detail":"base score 9.9"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}