CVE-2026-5426 KnowledgeDeliver deployments before February 24, 2026 use a static ASP.NET/IIS machineKey value

Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanisms and achieve remote code execution via malicious ViewState deserialization attacks...

CVE-2026-5426

Digital Knowledge KnowledgeDeliver versions prior to February 24, 2026 , are vulnerable to remote code execution (RCE) due to hard-coded ASP.NET/IIS machineKey values in standardized web.config files. Attackers can exploit these shared keys to circumvent ViewState validation mechanisms and perfor...

PageAdmin VIEWSTATE引发的血案

简要描述： 本想找个注入的，却发现Isstr 与其绕过不如（此处打码）直接来的痛快。 @wefgod 小弟弱弱的告诉你 ViewState不仅仅可以WooYun-2014-61699这样用，还可以这样滴哟 详细说明： 下载pageAdmin 反编译发现混淆过 蛋疼！ 只好翻翻页面！各种页面各种翻 咿！尼玛 这是啥 ViewState"constr" 那就抄刀上阵吧 打开 ：http://192.168.10.64:9992/e/member/index.aspx?s=1&type=memfavolst 复制然后 这是在本地搭建的 那试试官网 附上官网的...