⚡ Exploit-DB.ai CRITICAL
CRITICAL

CVE-2014-6271

Published: March 18, 2026 · Source: National Vulnerability Database (NVD)

⚡ AI Threat Assessment

Shellshock: Bash executes commands embedded in environment variables — trivially exploitable via CGI, DHCP clients, SSH ForceCommand, and many other vectors. Patch Bash immediately across all Unix/Linux systems. Assume compromise if internet-exposed.

📋 Official Description

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment. Shellshock.

Get Real-Time CVE Alerts

Supernova subscribers receive AI-triaged CVE alerts the moment they're published — before the PoC drops.

Start Supernova — $99/mo →