{"schema":"vulnpedia.poc/1","cve":"CVE-2014-6278","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2025-10-02","ransomware":false},"epss":{"score":0.99669,"percentile":0.99949},"cvss":{"version":"3.1","score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"has_public_poc":true,"poc_sources":[{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_mod_cgi_bash_env_exec.rb","executable":true,"sourceId":"exploit/multi/http/apache_mod_cgi_bash_env_exec","description":"Apache mod_cgi Bash Environment Variable Code Injection (Shellshock)","verification":"catalogued","source":"metasploit","modified":"2026-04-22 11:57:58 +0000","origins":[{"source":"metasploit","sourceId":"exploit/multi/http/apache_mod_cgi_bash_env_exec","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_mod_cgi_bash_env_exec.rb"},{"source":"metasploit","sourceId":"exploit/multi/http/apache_mod_cgi_bash_env_exec","modified":"2026-04-22 11:57:58 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_mod_cgi_bash_env_exec.rb"}]},{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cups_bash_env_exec.rb","executable":true,"sourceId":"exploit/multi/http/cups_bash_env_exec","description":"CUPS Filter Bash Environment Variable Code Injection (Shellshock)","verification":"catalogued","source":"metasploit","modified":"2026-04-22 11:57:58 +0000","origins":[{"source":"metasploit","sourceId":"exploit/multi/http/cups_bash_env_exec","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cups_bash_env_exec.rb"},{"source":"metasploit","sourceId":"exploit/multi/http/cups_bash_env_exec","modified":"2026-04-22 11:57:58 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cups_bash_env_exec.rb"}]},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/679ba7f969da","executable":false,"sourceId":"679ba7f969da","verification":"catalogued","source":"vulncheck-kev","modified":"2018-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"679ba7f969da","modified":"2018-03-01T00:00:00Z","url":"https://vulncheck.com/xdb/679ba7f969da"}],"repositoryUrl":"https://github.com/threat9/routersploit"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/afa8b81a8bd7","executable":false,"sourceId":"afa8b81a8bd7","verification":"catalogued","source":"vulncheck-kev","modified":"2018-03-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"afa8b81a8bd7","modified":"2018-03-01T00:00:00Z","url":"https://vulncheck.com/xdb/afa8b81a8bd7"}],"repositoryUrl":"https://github.com/veeeveeeveee/tabijibiyori-wgetCloud-al5tVPOHMdTt9x2d"},{"kind":"exploitdb","id":"39887","url":"https://www.exploit-db.com/exploits/39887","code":"https://www.exploit-db.com/download/39887","executable":true},{"kind":"exploitdb","id":"39568","url":"https://www.exploit-db.com/exploits/39568","code":"https://www.exploit-db.com/download/39568","executable":true},{"kind":"exploitdb","id":"34900","url":"https://www.exploit-db.com/exploits/34900","code":"https://www.exploit-db.com/download/34900","executable":true},{"kind":"exploitdb","id":"36933","url":"https://www.exploit-db.com/exploits/36933","code":"https://www.exploit-db.com/download/36933","executable":true},{"kind":"exploitdb","id":"34860","url":"https://www.exploit-db.com/exploits/34860","code":"https://www.exploit-db.com/download/34860","executable":true}],"poc_candidates":[],"test_commands":[{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2014-6278 && searchsploit -m 39887","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2014-6278 && searchsploit -m 39568","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2014-6278 && searchsploit -m 34900","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2014-6278 && searchsploit -m 36933","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2014-6278 && searchsploit -m 34860","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2014-6278/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2014-6278%22&type=repositories","executable":false}]}