CVE-2026-75429_PowerJob_friend_process_RCE

Exécution de code à distance sur le serveur PowerJob via /friend/process non authentifié injection Groovy 1. Résumé Le serveur PowerJob framework distribué d'ordonnancement de tâches / de calcul expose le point de terminaison /friend/process sur son port HTTP 10010 de la couche de transport...

CVE-2026-75429

PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer . A public proof-of-concept is available via a gist , which was also logged as a sighting by CIRCL on 2026-09-04. No specific pat...

EUVD-2026-71453

PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer...