CVE-2014-7186

CVE-2014-7186 is a critical denial-of-service vulnerability affecting GNU Bash through version 4.3 bash43-026, stemming from an out-of-bounds array access due to crafted here documents. With a CVSS score of 10.0, this flaw is easily exploitable over the network with low complexity and no authentication, potentially leading to a complete system compromise (C:C/I:C/A:C). While not listed in CISA KEV, its high EPSS and FAUCET scores, along with significant community discussion and media coverage, indicate its severe risk. Although no Metasploit or Nuclei modules are available, related exploit code exists on ExploitDB, and it is frequently discussed in conjunction with other Shellshock vulnerabilities.