CVE-2026-62853

The enterprise IoT platform ThingLinks is vulnerable to authenticated remote code execution (RCE) in versions prior to 1.4.0 . The vulnerability exists within the rule engine 's Groovy script test/register flow, where the /groovyScriptTest/registerScript endpoint accepts user-supplied Groovy scri...