CVE-2014-5091: A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to includes/func...

Security readout for executives and security teams

CVE-2014-5091 is a reported arbitrary PHP code execution issue in Status2K 2.5 Server Monitoring Software. If an exposed instance is vulnerable, an attacker could potentially run server-side code in the application context. The source bundle does not provide CVSS scoring, a vendor fix, or evidence of active exploitation. Exposure is likely limited to organizations still running Status2K 2.5, especially if the monitoring interface is reachable from untrusted networks. Because affected vendor/product metadata is sparse, teams should validate by inventory, application banners, file paths, package records, and externally exposed web routes. Treat this as a high-priority legacy exposure issue if Status2K is present. Arbitrary server-side code execution can lead to system compromise, but urgency depends on whether the software exists in the environment and whether it is reachable by attackers. Mitigation focus: Identify and retire any Status2K 2.5 deployments.; Restrict access to trusted administrative networks only.; Check vendor or maintainer guidance for fixed versions or replacement advice..

Prepared

Jun 6, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.