
nop@0x90sec
Found an unauthenticated command execution in Casdoor used by Tencent, IBM, Microsoft etc. the CVE was just assigned (CVE-2026-94802), here is the writeup: https://0x90.sh/threads/cve-2026-94802-unauthenticated-command-execution-in-casdoor.61/ This one was really annoying, got banned of their discord and it was silently fixed, in the end MITRE took care of it 😅
0002088
47 followersView on X
