Lucene search
+L

243 matches found

Cvelist
Cvelist
added 11 hours ago10 views

CVE-2026-71235 Magistrala IoT Platform: Unrestricted Go/Lua Script Execution in Rules Engine

Magistrala's Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts executed server-side when IoT messages arrive. The Go script engine re/golang.go runs scripts through the Yaegi interpreter with stdlib.Symbols, exposing the full Go standard library including os...

8.8CVSS
SaveExploits0References1
Rows per page
Query Builder