Question 1

What is CVE-2026-104584 — CVE-2026-104584?

Accepted Answer

reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Command Injection via the custom_headers scan engine configuration field in web/reNgine/tasks.py (fetch_url and dir_file_fuzz functions).

Question 2

What is the authoritative source for CVE-2026-104584?

Accepted Answer

CVE-2026-104584 (CVE-2026-104584) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

EPSS	0.74% probability of exploitation · percentile 53.7% · 2026-10-17T12:00:28Z
Last modified	2026-10-16

CVE-2026-104584CVE-2026-104584

Description

Scoring