CVE-2024-27632

CVE-2024-27632 is a high-severity privilege escalation vulnerability affecting GNU Savane versions 3.12 and earlier, allowing a remote attacker to gain elevated privileges by manipulating the form_id in the form_header() function. With a CVSS score of 8.8, this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered some community attention and media coverage, including a mention by a notable cybersecurity researcher.