Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A Server-Side Template Injection (SSTI) vulnerability in the /reporting/templates/preview/ endpoint of Amidaware Tactical RMM, affecting versions equal to or earlier than v1.3.1, allows low-privileged users with Report Viewer or Report Manager permissions to achieve remote command execution on the server. This occurs due to improper sanitization of the template_md parameter, enabling direct injection of Jinja2 templates. This occurs due to misuse of the generate_html() function, the user-controlled value is inserted into `env.from_string`, a function that processes Jinja2 templates arbitrarily, making an SSTI possible.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-01-29 | 3 | Disclosure3 |
| 2026-01-30 | 2 | Disclosure1General1 |
CVE-2025-69516 A Server-Side Template Injection (SSTI) vulnerability in the /reporting/templates/preview/ endpoint of Amidaware Tactical RMM, affecting versions equal to or earlier … https://www.cve.org/CVERecord?id=CVE-2025-69516
Post summary
The post details an SSTI vulnerability in Amidaware Tactical RMM, providing technical specifics but no proof‑of‑concept, exploit code, active exploitation evidence, or patch information.
@bbwriteups Is the CVE-2025-69516! Not the CVE-2025-69517
Post summary
The tweet merely distinguishes between CVE-2025-69516 and CVE-2025-69517 without providing further technical or operational details.
🟠 CVE-2025-69516 - High A Server-Side Template Injection (SSTI) vulnerability in the /reporting/templates/preview/ endpoint of Amidaware Tactical RMM, affecting versions equal to or earlier than v1.3.1, allows low-p... https://www.thehackerwire.com/vulnerability/CVE-2025-69516/ https://t.co/t9kHOhD731
Post summary
The post announces a high‑severity SSTI vulnerability in Amidaware Tactical RMM’s preview endpoint (v1.3.1 and earlier), with no PoC, exploit, or patch information provided.
CVE-2025-69516 Server-Side Template Injection in Tactical RMM v1.3.1 Enables Remote Command Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-69516
Post summary
The text announces a server‑side template injection vulnerability in Tactical RMM v1.3.1 that enables remote command execution.
My 2 new CVES!! https://www.cve.org/CVERecord?id=CVE-2025-69516 https://www.cve.org/CVERecord?id=CVE-2025-69517 The first one allows RCE using SSTI and the second one is a html injection storage! Both on TacticalRMM Thanks for my teammates: m0unt ( Ntgabriel) and 0xL1zard
Post summary
Two new CVEs for TacticalRMM are disclosed: one permits RCE via Server-Side Template Injection, and the other allows HTML injection storage.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | amidaware | tactical_rmm | - | - | - |