CVE-2009-2936

CVE-2009-2936 describes an authentication bypass vulnerability in the Command Line Interface (CLI) of Varnish reverse proxy server versions prior to 2.1.0. This flaw allows unauthenticated remote attackers to execute arbitrary code, manipulate the master process, read arbitrary files, and conduct CSRF attacks. With a CVSS score of 7.5 (High), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to significant compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, exploit modules are publicly available in Metasploit and ExploitDB, indicating a clear path for exploitation, though there is no evidence of active exploitation or significant community discussion.