/
vendors:"Hacktron AI" × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

hacktron.ai · critical

Pre-auth RCE CVE-2026-1731 (CVSS 9.9) in BeyondTrust Remote Support and older Privileged Remote Access

Hacktron AI disclosed CVE-2026-1731, a critical (CVSS 9.9) pre-authentication remote code execution vulnerability in BeyondTrust Remote Support (RS) and older versions of Privileged Remote Access (PRA). An unauthenticated remote attacker could run operating system commands in the context of the site user. Hacktron found the flaw through A…

CVE-2026-1731 healthcare financial services
hacktron.ai · exploit público critical

Pre-auth RCE in OpenAM via jato.clientSession unsafe deserialization (CVE-2026-33439)

Hacktron AI researchers disclosed CVE-2026-33439 (CVSS 9.8, CWE-502), an unauthenticated remote code execution flaw in OpenIdentityPlatform OpenAM 16.0.5 and earlier. It is a variant of CVE-2021-35464: the earlier fix whitelisted deserialization for the jato.pageSession parameter but left the sibling jato.clientSession parameter unfiltere…

CVE-2026-33439 CVE-2021-35464