CVE-2019-0604

Signals

NVD · CVE-2026-18980 · 6.3 · A vulnerability was identified in nearai ironclaw up to 0.29.1. Affected is the function classify_command_risk of the file src/tools/builtin/shell.rs. Such maniNVD · CVE-2026-18976 · 6.3 · A vulnerability was determined in NousResearch hermes-agent up to 0.16.0. This impacts the function get_tool_definitions of the file agent/agent_init.py of the NVD · CVE-2026-18974 · 5.3 · A vulnerability was found in heshengtao super-agent-party up to 0.4.1. This affects the function get_file_content of the file server.py of the component executeNVD · CVE-2026-18973 · 7.3 · A vulnerability has been found in heshengtao super-agent-party up to 0.4.1. The impacted element is the function sanitize_proxy_url of the file server.py of theCISA KEV · CVE-2026-63077 · 9.8 · JetBrains TeamCity Deserialization of Untrusted Data Vulnerability · Added 2026-08-05 · Due 2026-08-08CISA KEV · CVE-2026-18556 · 7.4 · N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability · Added 2026-08-04 · Due 2026-08-07NVD · CVE-2026-18980 · 6.3 · A vulnerability was identified in nearai ironclaw up to 0.29.1. Affected is the function classify_command_risk of the file src/tools/builtin/shell.rs. Such maniNVD · CVE-2026-18976 · 6.3 · A vulnerability was determined in NousResearch hermes-agent up to 0.16.0. This impacts the function get_tool_definitions of the file agent/agent_init.py of the NVD · CVE-2026-18974 · 5.3 · A vulnerability was found in heshengtao super-agent-party up to 0.4.1. This affects the function get_file_content of the file server.py of the component executeNVD · CVE-2026-18973 · 7.3 · A vulnerability has been found in heshengtao super-agent-party up to 0.4.1. The impacted element is the function sanitize_proxy_url of the file server.py of theCISA KEV · CVE-2026-63077 · 9.8 · JetBrains TeamCity Deserialization of Untrusted Data Vulnerability · Added 2026-08-05 · Due 2026-08-08CISA KEV · CVE-2026-18556 · 7.4 · N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability · Added 2026-08-04 · Due 2026-08-07

CVE Database · CVE-2019-0604

CVE-2019-0604

· CRITICALAnalyzed

CVSS v3.1

9.8

EPSS

99.83%

Published

Mar 5, 2019

Modified

Oct 29, 2025

CISA Known Exploited Vulnerability

Added: 2021-11-03 · Due: 2022-05-03

Apply updates per vendor instructions.

Public PoC / Exploit (9)

All weaponized →

TrickestTrickest PoC index Exploit-DBMicrosoft SharePoint - Deserialization Remote Code Execution GitHub PoClinhlhq/CVE-2019-0604★129 GitHub PoCk8gege/CVE-2019-0604★99 GitHub PoCboxhg/CVE-2019-0604★30 GitHub PoCGh0st0ne/weaponized-0604★8 GitHub PoCm5050/CVE-2019-0604★3 GitHub PoClikekabin/CVE-2019-0604_sharepoint_CVE★1 GitHub PoCdavidlebr1/cve-2019-0604-SP2010-netv3.5★0

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-20CWE-20

Affected Products (4)

microsoft · sharepoint_enterprise_servervulnerable

microsoft · sharepoint_foundationvulnerable

microsoft · sharepoint_servervulnerable

References (5)

http://www.securityfocus.com/bid/106914

Broken LinkThird Party AdvisoryVDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604