Lucene search
+L

472 matches found

Cvelist
Cvelist
added 4 hours ago7 views

CVE-2026-71235 Magistrala IoT Platform: Unrestricted Go/Lua Script Execution in Rules Engine

Magistrala's Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts executed server-side when IoT messages arrive. The Go script engine re/golang.go runs scripts through the Yaegi interpreter with stdlib.Symbols, exposing the full Go standard library including os...

8.8CVSS
SaveExploits0References1
Rows per page
Query Builder