CVE-2026-27181

CVE-2026-27181 is a high-severity vulnerability affecting MajorDoMo (Major Domestic Module) that allows unauthenticated attackers to uninstall arbitrary modules. This is due to the market module's admin() method improperly processing unauthenticated requests, enabling access to the uninstall functionality. An attacker can leverage this to delete module records, execute uninstall scripts, and recursively remove module directories, potentially wiping an entire MajorDoMo installation with simple GET requests. The vulnerability has a CVSS score of 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating it can be exploited remotely without authentication or user interaction, leading to a complete loss of availability. Despite its severity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.