Which products and versions are affected by CVE-2023-50917?

Affected: Majordomo (Mjdm). The full list is in the CVE brief.

Is CVE-2023-50917 being exploited in the wild?

It is exploited in the wild, listed in Industry KEV feed since Oct 17, 2025.

Is CVE-2023-50917 in the CISA KEV catalog?

No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.

Is there a public exploit for CVE-2023-50917?

Public exploit code is available.

Is there a fix for CVE-2023-50917?

Fixed versions are available, including Majordomo 2023-11-15.

How urgently should CVE-2023-50917 be patched?

Brandefense priority: patch immediately, because it is listed as exploited in the wild.

Request A Demo

Emerging threatsCritical

CVE-2023-50917Majordomo Command Injection

MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters.

Published Dec 15, 2023 · Updated Sep 28, 2026

Key Facts

Patch immediately

CVE-2023-50917 is a critical-severity vulnerability (CVSS 9.8 v3.1) affecting Majordomo (Mjdm).
It is exploited in the wild, listed in Industry KEV feed since Oct 17, 2025. Public exploit code is available.
EPSS estimates a 38% probability of exploitation in the next 30 days.
Fixed versions are available, including Majordomo 2023-11-15.
Brandefense priority: patch immediately, because it is listed as exploited in the wild.

Scores

CVSS v3.1

9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS (30-day exploit likelihood)

38%

Higher than 98.5% of all scored CVEs

Exploit maturity

Weaponized

ATLAS score

54/100

Publication score, see How it works

Exploitation Verdict

KEV listed

Oct 17, 2025

Federal due date

None

No federal due date

Ransomware use

Not reported

Attributed actors

None named

Exploit & Defence Guidance

Exploit maturity

Weaponized

Public exploit code

Proof-of-concept links

In-the-wild evidence

Reports of active use

Advisories And Exploit References

Description

MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager.

Known-Exploited Catalog Listings

Catalog	Added	Remediation due	Ransomware use
Industry KEV feed	Oct 17, 2025	n/a	Not reported

Affected Products

1 affected entries in total

Product	Affected versions	Fixed in
MajordomoMjdm	See advisory	2023-11-15

Patched Releases

Majordomo

2023-11-15

Timeline

Publicly disclosed
Dec 15, 2023
Added to Industry KEV feed
Oct 17, 2025
Last updated
Sep 28, 2026

Weakness Type

CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

References

advisorycve.org · CVERecord
advisorynvd.nist.gov · CVE-2023-50917
patchgithub.com · 0662e5e
patchgithub.com · 3ec3ffb
exploitMSF majordomo_cmd_inject_cve_2023_50917.rb

3 more references in the full CVE brief

FAQ

Common Questions.

MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters.
Affected: Majordomo (Mjdm). The full list is in the CVE brief.
It is exploited in the wild, listed in Industry KEV feed since Oct 17, 2025.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including Majordomo 2023-11-15.
Brandefense priority: patch immediately, because it is listed as exploited in the wild.

Is CVE-2023-50917 On Your Attack Surface?

Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.