[0day-rubbish] NCache Enterprise 5.3.6 (other versions with the same default-disabled security and handler logic are likely affected) Pre-authentication RCE (missing auth + attacker assembly load) (9.8)

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-26 15:28 UTC
  • Importiert: 2026-08-26 15:51 UTC
  • Quelle-ID: full_disc
  • uid_hash: db37e5adc499eea2ea4d677e8e2a331b85d82ef5071dae69a09d6e4acbcb7468
Full Disclosure

Inhalt

Posted by disclosure via Fulldisclosure on Aug 26 0day Rubbish Research Team is publicly disclosing a vulnerability in NCache Enterprise 5.3.6 (other versions with the

same default-disabled security and handler logic are likely affected).

Type: Pre-authentication RCE (missing auth + attacker assembly load) (CWE-94)

CVSS: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Impact: Unauthenticated remote code execution on the cache server as the ncache service user, exposing cached

application...

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Full Disclosure

full_disc

 threat_intel - de https://seclists.org/rss/fulldisclosure.rss
Zurueck zur Eintrags-Liste