CVE-2023-1685

CVE-2023-1685 is a critical command injection vulnerability affecting HadSky up to version 7.11.8, specifically within the /install/index.php component of its installation interface. This vulnerability allows a remote attacker with high privileges to execute arbitrary commands on the affected system. The CVSS score of 7.2 (High) indicates a significant risk, with a network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. The EPSS score is low, suggesting a minimal likelihood of exploitation in the wild. While the exploit has been publicly disclosed, there is no evidence of active exploitation (KEV list) and no known Metasploit, Nuclei, or ExploitDB modules. Community discussion and media coverage are also minimal, suggesting limited public awareness or active threat actor interest at this time.