CVE-2019-10863

CVE-2019-10863 is a command injection vulnerability in TeemIp versions prior to 2.4.0. Specifically, the new_config parameter in exec.php allows authenticated attackers to execute arbitrary PHP code, leading to immediate code execution without persistence on the server. This vulnerability carries a CVSS v3 score of 7.2 (HIGH), indicating a high impact on confidentiality, integrity, and availability, with low attack complexity and requiring high privileges for exploitation. The EPSS score of 0.14588 suggests a moderate likelihood of exploitation in the wild. While not listed on the KEV catalog or Hot List, an exploit module for Metasploit (EDB-46641) exists, confirming exploit code availability. Despite this, there is no recorded community discussion or media coverage, suggesting limited public awareness or active exploitation.