Skip to content
RCE Vulnerability in Dynamicweb 9.20.x Disclosed

RCE Vulnerability in Dynamicweb 9.20.x Disclosed

First seen 28 Oct 2026, 15:38 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 28, 2026 at 16:39 UTC
  • •CVE-2026-2731 is a critical RCE vulnerability affecting Dynamicweb 8 and 9.
  • •The vulnerability allows unauthenticated remote attackers to execute arbitrary code.
  • •Patches have been released for affected versions, and users are urged to update immediately.

A remote code execution (RCE) vulnerability has been identified in Dynamicweb versions 8 and 9, allowing unauthenticated attackers to execute arbitrary code. The vulnerability, tracked as CVE-2026-2731, affects all versions of Dynamicweb 9.* and 8.*. It was reported by an external security researcher and has been addressed in updates released on October 28, 2026. The CVSS v3.1 score for this vulnerability is 9.8, indicating a risk. Dynamicweb has urged customers to apply the latest patches to mitigate the risk of exploitation. No known exploits are currently available, but the potential for unauthorized access to system resources exists. The vulnerability was disclosed through a coordinated process, emphasizing the importance of timely updates for compliance and security.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-28
CVE-2026-2731 disclosed
Dynamicweb announced a critical RCE vulnerability affecting versions 8 and 9, with a CVSS score of 9.8.
Tenable
2026-10-28
Patches released
Dynamicweb released updates to fix the critical RCE vulnerability in versions 9.19.6, 9.20.3, and 9.21.0.
doc.dynamicweb.dev

More articles in this cluster (4)

Following this threat?

Track Dynamicweb and CVE-2026-2731 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 3

Common questions

Which versions are affected?
All versions of Dynamicweb 9.* and 8.* are affected by CVE-2026-2731.
Is there an active exploit for this vulnerability?
No known exploits are currently available for CVE-2026-2731.
What should organizations do to protect themselves?
Organizations should apply the latest patches released by Dynamicweb to mitigate the risk.