GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.

Published 28 Sep 2026Updated 28 Sep 20261617 sources

CVSS 10.0 ✓ VERIFIED REFERENCE△ CISA KEV

Overview Sources History

What happened

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.

Affected versions

Bourne-Again Shell (Bash): See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

Review the original advisory and validate affected versions.
Apply vendor-provided updates or mitigations when available.

Public PoC references

RepositoryAuthorFirst seenReference

Exploit-DB 34777GNU Bash - Environment Variable Command Injection (Metasploit)Shaun Colley2014-09-25Verified Exploit-DB 34895Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)Fady Mohammed Osman2014-10-06Verified Exploit-DB 34839IPFire - CGI Web Interface (Authenticated) Bash Environment Variable Code InjectionClaudio Viviani2014-10-01Verified Exploit-DB 36503QNAP - Admin Shell via Bash Environment Variable Code Injection (Metasploit)Patrick Pellegrino2015-03-26Verified Exploit-DB 36504QNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)Patrick Pellegrino2015-03-26Verified Exploit-DB 34766Bash - 'Shellshock' Environment Variables Command InjectionPrakhar Prasad & Subho Halder2014-09-25Verified Exploit-DB 35115CUPS Filter - Bash Environment Variable Code Injection (Metasploit)Metasploit2014-10-29Verified Exploit-DB 36933dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)fdiskyou2014-09-29Verified Exploit-DB 34765GNU Bash - 'Shellshock' Environment Variable Command InjectionStephane Chazelas2014-09-25Verified Exploit-DB 34860GNU bash 4.3.11 - Environment Variable dhclient@0x00string2014-10-02Verified Exploit-DB 34879OpenVPN 2.2.29 - 'Shellshock' Remote Command Injectionhobbily plunt2014-10-04Verified Exploit-DB 34896Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command InjectionPhil Blank2014-10-06Verified Exploit-DB 34862Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)Metasploit2014-10-02Verified Exploit-DB 36609Kemp Load Master 7.1.16 - Multiple VulnerabilitiesRoberto Suggi Liverani2015-04-02Verified Exploit-DB 35146PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command InjectionRyan King (Starfall)2014-11-03Verified SploitusShellshock RCE in Bash 1.0.3-4.3 via environment variable injection.KitPloit2026-09-28T18:16:29Candidate kitploit.comShellshock RCE in Bash 1.0.3-4.3 via environment variable injection.zh2026-09-28T18:16:29Candidate SploitusRCE in GNU Bash ≤ 4.3 via crafted environment variables enabling remote shell access (Shellshock).KitPloit2026-10-04T19:07:34Candidate kitploit.comRCE in GNU Bash ≤ 4.3 via crafted environment variables enabling remote shell access (Shellshock).ru2026-10-04T19:07:34Candidate

Corrections Report an issue