3 casos · pág. 1/1
Hacktron AI disclosed CVE-2026-1731, a critical (CVSS 9.9) pre-authentication remote code execution vulnerability in BeyondTrust Remote Support (RS) and older versions of Privileged Remote Access (PRA). An unauthenticated remote attacker could run operating system commands in the context of the site user. Hacktron found the flaw through A…
Hacktron AI researchers disclosed CVE-2026-33439 (CVSS 9.8, CWE-502), an unauthenticated remote code execution flaw in OpenIdentityPlatform OpenAM 16.0.5 and earlier. It is a variant of CVE-2021-35464: the earlier fix whitelisted deserialization for the jato.pageSession parameter but left the sibling jato.clientSession parameter unfiltere…
A high-severity vulnerability, CVE-2026-33725 (CVSS v3.1 7.2), affects Metabase Enterprise and allows an authenticated administrator to achieve remote command execution. It was discovered by Hacktron AI and Rahul Maini. The flaw lies in the /api/ee/serialization/import route, where the subname field of an imported YAML is concatenated uns…
