Security advisory: Pre-authentication RCE in nanoDLP stable build #10729 (Nano3Dtech)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-08-18 06:17 UTC
Importiert: 2026-08-18 07:41 UTC
Quelle-ID: full_disc
uid_hash: d74d3b4fc098d9ac7c347c18f173e6af69c3226a7eba722fe2061c5639761933

Full Disclosure

Inhalt

Posted by disclosure via Fulldisclosure on Aug 17 0day Rubbish Research Team is publicly disclosing a vulnerability in nanoDLP stable build #10729 (Nano3Dtech). The

research is published and a proof-of-concept is available.

Pre-authentication RCE (CVSS 9.8, pre-authentication)

nanoDLP exposes an unauthenticated remote code execution vulnerability. The Guest (unauthenticated) endpoint POST

/formula evaluates user-supplied JavaScript in an embedded Otto JS sandbox, which exposes a live nanoDLP...

No data

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss

Zurueck zur Eintrags-Liste