Vulnerability · Published Feb 18, 2026 · Assigned by VulnCheck

CVE-2026-27182Saturn Remote Mouse Server UDP Command Injection RCE

High 8.4

In plain English

A high-severity missing authentication in Saturn Remote Mouse Server from saturnremote. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities).

Severity (CVSS 3.1)8.4High

Exploit odds (30 days)1.0%top 37.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Saturn Remote Mouse Server contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending specially crafted UDP JSON frames to port 27000. Attackers on the local network can send malformed packets with unsanitized command data that the service forwards directly to OS execution functions, enabling remote code execution under the service account.

Affected products (as reported)

Vendor	Product	Versions
saturnremote	Saturn Remote Mouse Server	*

Weakness: CWE-306 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

PacketStorm-215835 exploit
Official Product Homepage product
VulnCheck Advisory: Saturn Remote Mouse Server UDP Command Injection RCE third-party-advisory