https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 04:27:15 +0000 https://vulnerability.circl.lu/vuln/cve-2026-71235 <p><strong>Affected:</strong> absmach magistrala</p> <p>Magistrala&#39;s Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts executed server-side when IoT messages arrive. The Lua script engine (re/lua.go) performs no input validation at all and preloads dangerous libraries: db (arbitrary database access), ioutil (file I/O), an HTTP client (SSRF), and filepath (traversal).</p> <p><strong>Affected:</strong> absmach magistrala</p> <p>Magistrala&#39;s Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts executed server-side when IoT messages arrive. The Lua script engine (re/lua.go) performs no input validation at all and preloads dangerous libraries: db (arbitrary database access), ioutil (file I/O), an HTTP client (SSRF), and filepath (traversal).</p> https://vulnerability.circl.lu/vuln/cve-2026-71235