CVE-2022-36566

CVE-2022-36566 is a critical command injection vulnerability affecting Rengine v1.3.0, specifically within its scan engine function. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low attack complexity, allowing an unauthenticated attacker to achieve complete compromise of confidentiality, integrity, and availability. While no public exploits, Metasploit modules, or Nuclei templates are currently available, and there is no evidence of active exploitation or significant community discussion, the high CVSS score and FAUCET Risk Score of 85/100 indicate a severe threat.