CVE-2026-90817

CVE-2026-90817 — REDCap Survey Passthru + Data Import RCE Vérificateur Python 3 et hook d'exploit configurable pour CVE-2026-90817 Securifera / Ryan Wincey. | ---|--- Produit| REDCap Vanderbilt Affecté| ≥ 13.3.0 jusqu'au correctif de branche Corrigé| 16.0.49 LTS, 17.3.10 LTS, 17.4.4 Standard+ CVS...

REDCap 13.3.0+ Survey Passthrough Scanner

REDCap versions 13.3.0 and higher contain an unauthenticated remote code execution vulnerability in survey passthrough routing and Data Import processing. This Python tool fingerprints candidate instances, evaluates version information and public survey hashes, and probes relevant routes...

REDCap 17.4.3 Survey Passthru Data Import Checker

REDCap versions 13.3.0 through 16.0.48, 17.0.0 through 17.3.9, and 17.4.0 through 17.4.3 contain an unauthenticated remote code execution vulnerability in survey passthrough routing and Data Import processing. This tool fingerprints instances and probes public-survey passthrough routes...

CVE-2026-90817

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exploit it by manipulating HTTP requests to access an unintended controller route from a public survey context and by...

CVE-2026-90817

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exploit it by manipulating HTTP requests to access an unintended controller route from a public survey context and by...

EUVD-2026-83738

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exploit it by manipulating HTTP requests to access an unintended controller route from a public survey context and by...

CVE-2026-90817

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exploit it by manipulating HTTP requests to access an unintended controller route from a public survey context and by...

CVE-2026-90817

CVE-2026-90817 is an unauthenticated Remote Code Execution vulnerability in REDCap 13.3.0 and higher , rated CVSS 9.8 (Critical) . The flaw resides in the survey passthrough routing and Data Import processing logic , where an attacker can manipulate HTTP requests to reach an unintended controller...

CVE-2026-90817: Improper Control of Generation of Code

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exploit it by manipulating HTTP requests to access an unintended controller route from a public survey context and by...

PT-2026-95962

Name of the Vulnerable Software and Affected Versions REDCap versions 13.3.0 through 16.0.48 REDCap versions 17.0.0 through 17.3.9 REDCap versions 17.4.0 through 17.4.3 Description An unauthenticated remote code execution flaw exists in the survey passthrough routing and Data Import processing...