Skip to content

CVE-2023-27524

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
September 7, 2026
Last Seen
September 7, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Auth Bypass and RCE Vulnerability in Apache Superset72.8

Apache Superset has been found to have a critical security vulnerability, CVE-2023-27524, that allows for authentication bypass and remote code execution (RCE). This flaw arises from a default insecure configuration, specifically a predictable Flask secret key, affecting numerous instances of Supers...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Zero-day ExploitCWE-200 - Exposure of Sensitive InformationCWE-798 - Use of Hard-coded CredentialsT1059 - Command and Scripting InterpreterPostgreSQLSQLiteExploit.py