CVE-2026-75429_PowerJob_friend_process_RCE

Ejecución Remota de Código en PowerJob Server mediante /friend/process sin autenticación Inyección Groovy 1. Resumen El PowerJob Server framework distribuido de planificación de trabajos / computación expone el endpoint /friend/process en su puerto HTTP 10010 de la capa de transporte Worker↔Serve...

CVE-2026-75429

PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer...

CVE-2026-75429

PowerJob versions 4.x through 5.1.2 expose the /friend/process endpoint on the Server-Worker transport layer (HTTP port 10010) without any authentication. An attacker can invoke an arbitrary public method on any Spring Bean; specifically, calling GroovyEvaluator.evaluate allows execution of arbit...

EUVD-2026-71453

PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer...

CVE-2026-75429

PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer...

CVE-2026-75429: Improper Authentication

PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer...