Odaily Planet Daily reports that cybersecurity firm XBOW disclosed a critical unauthenticated remote code execution vulnerability in a public web application used by the U.S. Election Assistance Commission (EAC). The application is used for resource and logistics calculations, not for voting machines or voter registration systems. The vulnerability could allow attackers to execute code with root privileges on the backend container by crafting specific web requests, granting access to local protected resources and external networks. XBOW stated that it reported the issue in accordance with the EAC’s published vulnerability disclosure policy; after verification by the EAC team, the vulnerability was patched prior to the U.S. midterm elections.
Critical Remote Code Execution Vulnerability Discovered on U.S. Election Assistance Commission Website
KuCoinFlashShare
Summary
XBOW discovered a critical unauthenticated remote code execution vulnerability in a public web application used by the U.S. Election Assistance Commission. The flaw, unrelated to voting systems, permitted potential access to backend resources and external networks. The vulnerability was reported under the EAC’s disclosure policy and patched before the midterm elections. As liquidity and crypto markets continue to face regulatory scrutiny, such incidents underscore the importance of robust web infrastructure security, in line with upcoming frameworks like MiCA (EU Markets in Crypto-Assets Regulation).
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.