CVE-2026-75429_PowerJob_friend_process_RCE

PowerJob Server Remote Code Execution via Unauthenticated /friend/process Groovy Injection 1. Summary The PowerJob Server distributed job scheduling / computing framework exposes the /friend/process endpoint on its Worker↔Server transport-layer HTTP port 10010 with no authentication whatsoever...

CVE-2026-75429

PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer...

CVE-2026-75429

PowerJob versions 4.x through 5.1.2 expose the /friend/process endpoint on the Server-Worker transport layer (HTTP port 10010) without any authentication. An attacker can invoke an arbitrary public method on any Spring Bean; specifically, calling GroovyEvaluator.evaluate allows execution of arbit...

EUVD-2026-71453

PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer...

CVE-2026-75429

PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer...

CVE-2026-75429: Improper Authentication

PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer...