Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2024-4701: A path traversal issue potentially leading to remote code execution in Genie for all versions prior to 4.3.18

59
This week
CRITICAL 9.9

CVE-2024-4701 is a critical-severity flaw (CVSS 9.9) affecting affected software. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

A path traversal issue potentially leading to remote code execution in Genie for all versions prior to 4.3.18

Why this priority

  • Critical severity
  • EPSS top 2%: very likely to be exploited

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score9.9 (Critical)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededLow
User interactionNone
EPSS exploit chance24.6% (top 2%)
CISA exploited listNo
WeaknessCWE-22
Published2024-05-14
Last modified2026-06-17
Publisher (CNA): Netflix, Inc.

Share: LinkedIn · X · Reddit

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Timeline

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2024-4701?

No fixed release is listed yet. Watch the vendor advisory and apply any mitigation shown on this page.

Is CVE-2024-4701 being exploited?

CVE-2024-4701 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2024-4701 affect?

CVE-2024-4701 affects affected software. Severity is critical (CVSS 9.9). A path traversal issue potentially leading to remote code execution in Genie for all versions prior to 4.3.18

How urgent is CVE-2024-4701?

Priority 59/100. Critical severity; EPSS top 2%: very likely to be exploited

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.