CVE-2026-39842

CVE-2026-39842: OpenRemote Expression Injection RCE in Rules Engine TL;DR Critical remote code execution vulnerability in OpenRemote's Rules Engine allows authenticated users with write:rules role to execute arbitrary code on the server with root privileges. CVSS Score : 10.0 Critical CVSS Vector...

owLSM

🛡️ owLSM 志在成为 Linux 预防与检测的黄金标准 🛡️ owLSM 是一个基于 eBPF LSM 的代理，实现了有状态的 Sigma 规则引擎，专注于预防。 项目是什么： owLSM 主要关注三件事： 1 通过 eBPF LSM 实现的 Sigma 规则引擎提供预防能力。 2 eBPF 探针之间的数据关联，以实现有状态的预防能力。 3 安全导向的系统监控，每个事件都包含安全专家所需的全部上下文。 目标用户： 负责 Linux 系统防御的团队，提供 Linux/云安全解决方案的公司，以及寻找复杂 eBPF 解决方案实现示例的开发者或代理。 使用场景： 已用于 Cybereason...

cloud-custodian

Cloud Custodian c7n Cloud Custodian（c7n としても知られる）は、パブリッククラウドのアカウントとリソースを管理するためのルールエンジンです。ユーザーはポリシーを定義することで、セキュアかつコスト最適化された、適切に管理されたクラウドインフラストラクチャを実現できます。これは、組織が持つ多くのアドホックなスクリプトを、統合されたメトリクスとレポーティングを備えた軽量で柔軟なツールにまとめます。 Custodian は、AWS、Azure、GCP...

Hermes-Proxy

Hermes Proxy Hermes Proxy は Electron と Vite で構築されたデスクトップ HTTP/HTTPS 傍受アプリです。 リクエスト/レスポンスをキャプチャし、リクエストの再送信、HAR ファイルのエクスポート/インポートが可能です。 特徴 リクエスト/レスポンスの詳細を表示するライブトラフィックテーブル リクエストの再送信（URL/ヘッダー編集可能） すべてのトラフィックを HAR としてエクスポート HAR ファイルをトラフィックテーブルにインポート レスポンスボディの保存...

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon は、フリーでオープンソース、クロスプラットフォームの 脅威モデリング アプリケーションです。システムの図式化と、脅威/対策を自動生成するルールエンジンを備えています。これは OWASP Incubator Project です。プロジェクトの焦点は、優れた UX、強力なルールエンジン、そして他の開発ライフサイクルツールとの統合にあります。 OWASP による 脅威モデリングとリスク評価 の良い概要があり、Threat Dragon が実現する内容をさらに詳しく説明しています： データフロー図の設計 脅威の自動判定と順位付...

cloud-custodian v0.9.52.0

Cloud Custodian c7n Cloud Custodian, also known as c7n, is a rules engine for managing public cloud accounts and resources. It allows users to define policies to enable a well managed cloud infrastructure, that's both secure and cost optimized. It consolidates many of the adhoc scripts...

CVE-2026-71235

A flaw was found in Magistrala's Rules Engine. An authenticated low-privileged user can exploit this vulnerability by creating rules with embedded Go or Lua scripts. These scripts are executed server-side without sufficient validation, allowing for arbitrary file read and write operations, access...

CVE-2026-71235 Magistrala IoT Platform - Unrestricted Go/Lua Script Execution in Rules Engine

Magistrala's Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts executed server-side when IoT messages arrive. The Lua script engine re/lua.go performs no input validation at all and preloads dangerous libraries: db arbitrary database access, ioutil file I/O, ...

CVE-2026-71235

CVE-2026-71235 affects Magistrala’s Rules Engine, where authenticated users can create rules with embedded Go or Lua scripts that execute server-side when IoT messages arrive. The Go engine (re/golang.go) runs scripts via Yaegi, exposing the full Go standard library (including os and net/http) wi...

CVE-2026-71235 Magistrala IoT Platform - Unrestricted Go/Lua Script Execution in Rules Engine

Magistrala's Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts executed server-side when IoT messages arrive. The Lua script engine re/lua.go performs no input validation at all and preloads dangerous libraries: db arbitrary database access, ioutil file I/O, ...

CVE-2026-71235: Improper Control of Generation of Code

Magistrala's Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts executed server-side when IoT messages arrive. The Lua script engine re/lua.go performs no input validation at all and preloads dangerous libraries: db arbitrary database access, ioutil file I/O, ...

Exploit for CVE-2026-39842

CVE-2026-39842: OpenRemote Expression Injection RCE in Rules E...

CVE-2026-39842

OpenRemote is an open-source IoT platform. Versions 1.21.0 and below contain two interrelated expression injection vulnerabilities in the rules engine that allow arbitrary code execution on the server. The JavaScript rules engine executes user-supplied scripts via Nashorn's ScriptEngine.eval...

CVE-2026-39842

OpenRemote is an open-source IoT platform. Versions 1.21.0 and below contain two interrelated expression injection vulnerabilities in the rules engine that allow arbitrary code execution on the server. The JavaScript rules engine executes user-supplied scripts via Nashorn's ScriptEngine.eval...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection in the rules engine process. An attacker can execute arbitrary code on the server, read arbitrary files, steal environment variables including database credentials, and bypass multi-tenant isolation to access da...

CVE-2026-39842: Improper Control of Generation of Code

OpenRemote is an open-source IoT platform. Versions 1.21.0 and below contain two interrelated expression injection vulnerabilities in the rules engine that allow arbitrary code execution on the server. The JavaScript rules engine executes user-supplied scripts via Nashorn's ScriptEngine.eval...

CVE-2026-39842

OpenRemote is an open-source IoT platform. Versions 1.21.0 and below contain two interrelated expression injection vulnerabilities in the rules engine that allow arbitrary code execution on the server. The JavaScript rules engine executes user-supplied scripts via Nashorn's ScriptEngine.eval...

CVE-2026-39842 OpenRemote is Vulnerable to Expression Injection

OpenRemote is an open-source IoT platform. Versions 1.21.0 and below contain two interrelated expression injection vulnerabilities in the rules engine that allow arbitrary code execution on the server. The JavaScript rules engine executes user-supplied scripts via Nashorn's ScriptEngine.eval...

GHSA-7MQR-33RV-P3MP Expression Injection in OpenRemote

Summary The OpenRemote IoT platform's rules engine contains two interrelated critical expression injection vulnerabilities that allow an attacker to execute arbitrary code on the server, ultimately achieving full server compromise. - Unsandboxed Nashorn JavaScript Engine: JavaScript rules are...

PT-2026-32964

Summary The OpenRemote IoT platform's rules engine contains two interrelated critical expression injection vulnerabilities that allow an attacker to execute arbitrary code on the server, ultimately achieving full server compromise. - Unsandboxed Nashorn JavaScript Engine: JavaScript rules are...