CVE-2024-48760: exploitation status and patch state

CVE-2024-48760 · CVSS 9.8 CRITICAL · EPSS 45%

An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function. The attacker can upload a malicious perlcmd.cgi file that overwrites the original upload.cgi file, enabling remote command execution.

Is CVE-2024-48760 exploited?

• Not in the CISA KEV catalog.
• EPSS puts exploitation in the next 30 days at 45%.
• Public exploit code: packaged in a public tool.

Which products and versions are affected?

No affected package list recorded here yet.

Is there a patch?

No patch identifier recorded here yet.

What PlainSec published about CVE-2024-48760

• Metasploit Modules Turn Old CVEs Into Routine Targets (2026-05-16)

Primary sources

• NVD record
• Metasploit: exploit/multi/http/gestioip_rce
• Exploit-DB 52204

What this record does not say

• No affected package data.
• No patch identifier.

KEV and EPSS are re-checked daily. Record last updated 2026-08-11.