CVE-2016-8592

CVE-2016-8592 describes a critical vulnerability in Trend Micro Threat Discovery Appliance versions 2.6.1062r1 and earlier, allowing remote authenticated users to execute arbitrary code as the root user. This is achieved by injecting shell metacharacters into the cache_id parameter of the log_query_system.cgi script. With a CVSS v3 score of 8.8 (High), the vulnerability presents a significant risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, suggesting it is not currently a high-profile threat.