CVE record · 1 source
CVE-2026-62853
CVSS 9.9ThingLinks is an enterprise IoT platform.
- Vendor
- Mqttsnet
- Product
- thinglinks
- CVSS v3.1
- 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- EPSS
- 0.004 (p35)
- Weakness
- CWE-78, CWE-94
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
ThingLinks is an enterprise IoT platform.
ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` endpoint accepts user-supplied Groovy script content and passes it to an unsandboxed `Groovy compilation and loading` flow. An…