[0day-rubbish] Royal Render 9.1.26b: default-unauthenticated job submission on rrServer TCP 7773 reaches worker-side shell execution as the worker identity, measured root (8.1 High)

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-10-20 18:50 UTC
  • Importiert: 2026-10-20 20:24 UTC
  • Quelle-ID: full_disc
  • uid_hash: a6ee84ff73407bcdbb5765a74e9b1de20d2a3329df96ca814935cf100c95236e

Inhalt

Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in Royal

Render 9.1.26b, the closed-source render-farm job manager for VFX and

animation studios from Binary Alchemy (proprietor Holger Schoenberger) of

Ludwigsburg, Germany. Royal Render

is a different product from the Royal Server gateway sold by Royal Apps GmbH

of Austria; the two are unrelated companies sharing one word in their names,

and this disclosure concerns the German...

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Full Disclosure

full_disc

threat_intel - de https://seclists.org/rss/fulldisclosure.rss