CVE-2018-13140

HIGH 8.1CVE-2018-13140 · Published 24/09/2018 · updated 17/06/2026

In short

CVE-2018-13140 is a HIGH (CVSS 8.1) vulnerability affecting antidote 9 (druide).
Chance of exploitation in the next 30 days (EPSS): 6.6%, higher than 93.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
antidote 9 druide	`≤ 5.1`	No fix yet

Description

Druide Antidote through 9.5.1 on Windows and Linux allows remote code execution through the update mechanism by leveraging use of HTTP to download installation packages.

References

packetstormsecurity.com/files/149468/Antidote-9.5.1-Code-Execution.html · Exploit
seclists.org/fulldisclosure/2018/Sep/38 · Exploit
sysdream.com/news/lab/2018-09-21-cve-2018-13140-antidote-remote-code-execution-against-the-update-component · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free