VulnRadar

Data against noise.

Page generated: 07 Nov 2026, 04:32 UTC

CVE-2014-6271

Read full description

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

CVSS 9.8 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE

3.6/10

REALITY · THREAT PRIORITY

9.0/10

General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?

Recorded exploitation baseline: +7.00
Technical severity: CVSS 9.8: +1.47
Fresh EPSS: 100.00%: +0.50

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 89 documents and public datasets.

Hype components

Headline sample (25%)

50/100

Press, 30 days (60%)

40/100

Grounded branding (15%)

0/100

HYPE TOTAL36/100

Sources and documents

VICE

Press · 30 Oct 2026, 16:27 · Ghost in the Shell Shock—This Week On VICE: Members Only - VICE

BGMSportsTrax

Press · 29 Oct 2026, 20:35 · Map Motorsports Eve of Destruction at Lucas Oil Speedway - BGMSportsTrax

The Guardian

Press · 29 Oct 2026, 18:30 · Survivors shell-shocked after deadly Spain train crash - The Latest - The Guardian

Britannica

Press · 27 Oct 2026, 05:00 · Treating combat fatigue (shell shock) during World War I - Britannica

WDET 101.9 FM

Press · 26 Oct 2026, 13:12 · Margo Moon’s Shell Shock’D Tacos | CONTAINER on The Metro - WDET 101.9 FM

See all 89 source documents

Irish Independent

Press · 25 Oct 2026, 16:06 · Dr Crokes late scoring burst secures 15th Kerry SFC title against shell-shocked Kenmare Shamrocks - Irish Independent

IMDb

Press · 25 Oct 2026, 16:01 · Operation Shell Shock (2020) - IMDb

American Rifleman

Press · 07 Oct 2026, 07:00 · Shell Shock & CBC Global Ammunition Sign Manufacturing Agreement | An Official Journal Of The NRA - American Rifleman

Outdoor Wire

Press · 02 Oct 2026, 07:00 · Shell Shock Technologies and CBC Global Ammunition Sign Definitive Manufacturing Agreement - Outdoor Wire

thefirearmblog.com

Press · 08 Sep 2026, 07:00 · No Shrapnel! ShellShock Protection High Performance Ballistic Glasses - thefirearmblog.com

Yahoo

Press · 03 Sep 2026, 07:00 · Soleil Moon Frye Reveals Crazy Town Frontman Shifty Shellshock’s Relapse Contributed to Their Split - Yahoo

Entertainment Weekly

Press · 03 Sep 2026, 07:00 · Soleil Moon Frye recalls showing late ex Shifty Shellshock her doc on his sobriety struggles - Entertainment Weekly

mxdwn Movies

Press · 01 Sep 2026, 07:00 · Leonardo DiCaprio’s Appian Way Joins Documentary Project About Shifty Shellshock - mxdwn Movies

The Hollywood Reporter

Press · 31 Aug 2026, 07:00 · Leonardo DiCaprio’s Appian Way and Dax Dasilva Board Soleil Moon Frye’s Shifty Shellshock Doc - The Hollywood Reporter

Yahoo

Press · 31 Aug 2026, 07:00 · Shifty Shellshock Doc Revisits Crazy Town Frontman’s Life, Addiction - Yahoo

New York Post

Press · 27 Aug 2026, 07:00 · Shell shock! 130,000 killer octopuses unleashed to fight crab invasion - New York Post

Chesapeake Bay Magazine

Press · 24 Aug 2026, 23:45 · Shell Shock: Leatherback Turtle Nesting in VA - Chesapeake Bay Magazine

Outdoor Wire

Press · 14 Aug 2026, 07:00 · ShellShock Protection Introduces New High-Performance Ballistic Glasses for the Ultimate Athlete - Outdoor Wire

Outdoor Wire

Press · 30 Jul 2026, 07:00 · Shell Shock Technologies Launches NAS³ Primed Cases in .308 and 5.56 NATO - Outdoor Wire

puck.news

Press · 23 Jul 2026, 07:00 · Armani Suitor News & Kering Shell Shock - puck.news

jeu.video

Press · 23 Jul 2026, 07:00 · [Test] Shellshock on Steam: Check Its 10–30-Minute Runtime Before You Buy - jeu.video

Bloody Disgusting

Press · 15 Jul 2026, 11:35 · WWI Anomaly Horror Game ‘Shellshock’ Available Today on Steam [Trailer] - Bloody Disgusting

IMDb

Press · 12 Jul 2026, 16:40 · Shell Shock: Part 1 (2012) - IMDb

Outdoor Wire

Press · 10 Jul 2026, 07:00 · Shell Shock Technologies Announces .50 BMG NAS³ Case - Outdoor Wire

IGN

Press · 10 Jul 2026, 07:00 · Shellshock [Videos] - IGN

IGN Africa

Press · 10 Jul 2026, 07:00 · Shellshock - Official Gameplay Trailer - IGN Africa

WBEZ Chicago

Press · 08 Jul 2026, 07:00 · ‘Shell-shocked’ Chicago scientists raise alarm about federal overhaul of research grant funding - WBEZ Chicago

Daily Dead

Press · 08 Jul 2026, 07:00 · "NEW WARS! NEW SOLDIERS! SAME OLD PRICE TO PAY…" - An Exclusive Preview of New EC Comics Anthology: SHELLSHOCK #1 - Daily Dead

Outdoor Wire

Press · 29 Jun 2026, 07:00 · Shell Shock Technologies' Sponsored Shooter John Vlieger Takes Home 1st in Carry Optics Division at 2026 Bluegrass USPSA State Championship - The Outdoor Wire | The Outdoor Wire - Outdoor Wire

The Bubble

Press · 24 Jun 2026, 07:00 · Shellshock!’s ‘Crystal Unclear: An Improvised Séance’ – Review - The Bubble

thefirearmblog.com

Press · 23 Jun 2026, 07:00 · NEW ShellShock Protection EXO Pro Elite Electronic Hearing Protection - thefirearmblog.com

AllOutdoor.com

Press · 19 Jun 2026, 07:00 · New ShellShock Protection EXO Pro Elite Electronic Ear Pro - AllOutdoor.com

Defense and Munitions

Press · 18 Jun 2026, 07:00 · Shell Shock Technologies, CBC Partner to scale advanced ammunition technology - Defense and Munitions

Outdoor Wire

Press · 09 Jun 2026, 07:00 · Shell Shock Technologies and CBC Global Ammunition to Commemorate Strategic Partnership at Eurosatory 2026 - Outdoor Wire

Outdoor Wire

Press · 09 Jun 2026, 07:00 · ShellShock Protection Unveils New EXO Pro Elite™ Electronic Hearing Protection - Outdoor Wire

Pew Pew Tactical

Press · 05 Jun 2026, 07:00 · New Product Highlight: ShellShock EXO Pro Elite - Pew Pew Tactical

Channel 4

Press · 31 May 2026, 07:00 · Watch War's Secret Shame: Shell Shock with Dan Snow - Channel 4

Comic Book Resources

Press · 29 May 2026, 07:00 · New War Thriller From Oni Press Marches Into Summer 2026 - Comic Book Resources

thefirearmblog.com

Press · 22 May 2026, 07:00 · Shell Shock Technologies Launches .338 Lapua NAS3 Cartridge Cases - thefirearmblog.com

The Fandomentals

Press · 19 May 2026, 07:00 · Oni Press Brings Old School War Stories Back In New EC Comics Special ‘Shellshock’ - The Fandomentals

IGN

Press · 18 May 2026, 07:00 · EC Comics Returns With Shellshock, a Brutal New Anthology That Delivers a Concentrated Dose of Military Horror - IGN

Bleeding Cool News

Press · 18 May 2026, 07:00 · EC Comics Goes To War In August With Shellshock Anthology From Oni - Bleeding Cool News

Miami New Times

Press · 12 May 2026, 07:00 · Vinyl Collectors Get a New Record Store in Fort Lauderdale - Miami New Times

Columbia University

Press · 18 Apr 2026, 07:00 · How the Shell Shocked Soldier Song Meme Became a Viral Phenomenon - Columbia University

UNSW Sydney

Press · 24 Feb 2026, 08:00 · Shell shock! Peanut waste can be turned into high-quality futuristic graphene - UNSW Sydney

The Ecologist

Press · 10 Feb 2026, 08:00 · Shell shock for Dutch climate policy - The Ecologist

Outdoor Wire

Press · 20 Jan 2026, 08:00 · Shell Shock Technologies Celebrates SHOT Show 2026 with Exclusive Ammo Sale - Outdoor Wire

Traffic.org

Press · 17 Nov 2025, 08:00 · ShellShock: The State of South African Abalone Poaching and Trafficking in 2025 - Traffic.org

Huntress

Press · 07 Nov 2025, 08:00 · CVE-2014-6271 (Shellshock): Analysis, Detection & Prevention - Huntress

Field Effect

Press · 07 Oct 2025, 07:00 · Legacy vulnerabilities remain prime targets of exploitation - Field Effect

Cyber Daily

Press · 03 Oct 2025, 07:00 · Another 5 vulnerabilities added to CISA’s KEV catalogue - Cyber Daily

University of Maryland Athletics

Press · 07 Jul 2025, 07:00 · Maryland Basketball Alumni Reunite for $1M TBT Run With Team Shell Shock - University of Maryland Athletics

ESPN

Press · 01 May 2025, 07:00 · Shell shock: Elche ban sunflower seeds to clean up stadium - ESPN

History.com

Press · 20 Mar 2025, 18:58 · General Eisenhower warns of the risk of “shell shock” - History.com

History.com

Press · 20 Mar 2025, 18:33 · Psychiatrist reports on the phenomenon of shell shock - History.com

www.thefisherman.com

Press · 23 Feb 2025, 12:10 · Shell Shock: Blue Claws & Clams - www.thefisherman.com

Billboard

Press · 25 Sep 2024, 07:00 · Crazy Town Singer Shifty Shellshock’s Official Cause of Death Revealed - Billboard

People.com

Press · 24 Sep 2024, 07:00 · Crazy Town Frontman Shifty Shellshock Cause of Death Revealed 3 Months After He Died at 49 - People.com

People.com

Press · 27 Jun 2024, 07:00 · Shifty Shellshock of Crazy Town's Manager Confirms He Died of Overdose: 'No One Had the Exact Tools' (Exclusive) - People.com

People.com

Press · 26 Jun 2024, 07:00 · Shifty Shellshock Was Introspective in Final Instagram Posts Before His Death at 49: 'I Need to Love More' - People.com

wthr.com

Press · 25 Jun 2024, 07:00 · Crazy Town frontman and 'Butterfly' singer Shifty Shellshock dead at 49 - wthr.com

ABC7 Los Angeles

Press · 25 Jun 2024, 07:00 · Seth Binzer, Crazy Town frontman and 'Butterfly' singer known as 'Shifty Shellshock,' dies at 49 in LA County - ABC7 Los Angeles

BBC

Press · 25 Jun 2024, 07:00 · Crazy Town: Butterfly singer Shifty Shellshock dies, aged 49 - BBC

MPR News

Press · 14 Jun 2024, 07:00 · Meet the ‘Queen Spinner of Shell Shock,’ a local celebrity at MOA - MPR News

Science | AAAS

Press · 04 Sep 2021, 10:59 · Shell Shock Revisited: Solving the Puzzle of Blast Trauma - Science | AAAS

ArcGIS StoryMaps

Press · 09 Dec 2020, 08:00 · The Story Of Shell Shock - ArcGIS StoryMaps

National Geographic

Press · 16 Jun 2020, 07:00 · How PTSD went from ‘shell-shock’ to a recognized medical diagnosis - National Geographic

VPM

Press · 06 Nov 2019, 08:00 · Shell Shock 1919: How The Great War Changed Culture - VPM

PBS

Press · 11 Nov 2018, 08:00 · From shell-shock to PTSD, a century of invisible war trauma - PBS

The Conversation

Press · 08 Nov 2018, 08:00 · What World War I taught us about PTSD - The Conversation

McSweeney’s Internet Tendency

Press · 19 May 2017, 07:00 · Best Joke Ever: George Carlin: Euphemism Fighter Supreme - McSweeney’s Internet Tendency

Bitdefender

Press · 06 Jul 2016, 07:00 · ShellShock Roundup: What to do if You are Vulnerable - Bitdefender

National Geographic

Press · 09 Jun 2016, 07:00 · 'Shell Shock'—The 100-Year Mystery May Now Be Solved - National Geographic

The Conversation

Press · 14 Apr 2015, 07:00 · From shell shock to PTSD: proof of war’s traumatic history - The Conversation

Cisco Blogs

Press · 21 Oct 2014, 07:00 · Nexus 9000/7000 Series Switches No Longer Vulnerable to Shellshock Bug - Cisco Blogs

Rapid7

Press · 15 Oct 2014, 07:00 · Block the POODLE's bite: How to scan for CVE-2014-3566 - Rapid7

CrowdStrike

Press · 08 Oct 2014, 07:00 · Mitigating the Bash (ShellShock) Vulnerability - CrowdStrike

Qualys

Press · 02 Oct 2014, 07:00 · Using Qualys WAS Scan to Detect ShellShock Vulnerability - Qualys

Troy Hunt

Press · 01 Oct 2014, 07:00 · The anatomy of a Shellshock attack in the wild - Troy Hunt

Kaspersky

Press · 30 Sep 2014, 07:00 · Shellshock: how to check and update potentially vulnerable systems - Kaspersky

Cloudflare Blog

Press · 30 Sep 2014, 07:00 · Inside Shellshock: How hackers are using it to exploit systems - Cloudflare Blog

The New York Times

Press · 25 Sep 2014, 07:00 · Security Experts Expect ‘Shellshock’ Software Bug in Bash to Be Significant (Published 2014) - The New York Times

WIRED

Press · 25 Sep 2014, 07:00 · Hackers Are Already Using the Shellshock Bug to Launch Botnet Attacks - WIRED

Troy Hunt

Press · 25 Sep 2014, 07:00 · Everything you need to know about the Shellshock Bash bug - Troy Hunt

The Guardian

Press · 25 Sep 2014, 07:00 · What is the Shellshock bug? Is it worse than Heartbleed? - The Guardian

Qualys

Press · 25 Sep 2014, 07:00 · Qualys QID 13038: Remote Detection for BASH ShellShock - Qualys

Unit 42

Press · 25 Sep 2014, 07:00 · Palo Alto Networks Addresses Bash Vulnerability Shellshock: Mitigation for CVE-2014-6271 - Unit 42

The Conversation

Press · 05 Aug 2014, 07:00 · Shell shock treatments reveal the conflict in psychiatry’s heart - The Conversation

IGN

Press · 20 May 2012, 07:00 · Shellshock: Nam '67 - IGN

Score evolution

● Hype ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 3.6 · reality 9.0 (2026-11-02 15:12). The curve appears once the score changes.

Public exploit evidence

Public exploit entries / repo candidates

See 8 repos with metrics

Repository	Stars	Forks	Language	Updated
b4keSn4ke/CVE-2014-6271	15	2	Python	01 Apr 2022, 03:17
ksang/shellshock	4	1	Python	26 Sep 2014, 07:00
securusglobal/BadBash	4	1	Ruby	26 Sep 2014, 01:35
zalalov/CVE-2014-6271	4	2	Python	30 Apr 2017, 20:00
sch3m4/RIS	2	0	Python	29 Sep 2014, 10:09
mochizuki875/CVE-2014-6271-Apache-Debian	1	0	HTML	06 Oct 2021, 17:00
TheRealCiscoo/shellshock-poc	1	0	Python	16 May 2026, 10:31
knightc0de/Shellshock_vuln_Exploit	0	0	Python	21 Jun 2025, 09:00

Public exploit evidence

exploitdb #34765 2014-09-25
exploitdb #34766 2014-09-25
exploitdb #34777 2014-09-25
exploitdb #34839 2014-10-01
exploitdb #34860 2014-10-02
exploitdb #34862 2014-10-02
exploitdb #34879 2014-10-04
exploitdb #34895 2014-10-06
exploitdb #34896 2014-10-06
exploitdb #34900 2014-10-06
exploitdb #35115 2014-10-29
exploitdb #35146 2014-11-03
exploitdb #36503 2015-03-26
exploitdb #36504 2015-03-26
exploitdb #36609 2015-04-02
exploitdb #37816 2015-08-18
exploitdb #38849 2015-12-02
exploitdb #39918 2016-06-10
exploitdb #40619 2016-10-21
exploitdb #40938 2016-12-18
exploitdb #42938 2017-10-02

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence: Exploitation recorded
Priority basis: Recorded exploitation; CVSS 9.8; EPSS 100.0%
Attention, last 30 days: 7 distinct story titles; 7 press documents; 1 publisher domains.
Technical potential: network access, no prior privileges, no user interaction.
Observed activity: Exploitation recorded in CISA KEV.
Known scale: Not quantified.
Evidence confidence basis: Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:57:36.494009+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline

First press mention

20 May 2012, 07:00

Published

24 Sep 2014, 18:00

Added to the CISA KEV catalog

28 Jan 2022, 00:00

Latest press mention

30 Oct 2026, 16:27

Score calculated

05 Nov 2026, 13:57

PoCs on GitHub

21 repositories