⚡ Exploit-DB.ai CRITICAL
CRITICAL

CVE-2021-38647

Published: March 18, 2026 · Source: National Vulnerability Database (NVD)

⚡ AI Threat Assessment

OMIGOD: Silently installed Azure Linux agent allows unauthenticated root RCE via port 5986. Auto-patched by Azure but requires action on-premises SCOM deployments. Check all Azure Linux VMs for OMI agent version and ensure auto-update is enabled.

📋 Official Description

Open Management Infrastructure (OMI) in Azure and SCOM has a remote code execution vulnerability known as OMIGOD allowing unauthenticated root access via HTTP.

Get Real-Time CVE Alerts

Supernova subscribers receive AI-triaged CVE alerts the moment they're published — before the PoC drops.

Start Supernova — $99/mo →