Frequency
2
occurrences
First Seen
September 21, 2026
Last Seen
September 24, 2026
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—
Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A remote code execution vulnerability (CVE-2026-90817) has been identified in REDCap versions 13.3.0 and above, allowing attackers to exploit public survey hashes to access unintended controllers. The vulnerability arises from unsafe file-path handling through the `__passthru` routing mechanism. Sec...
Public Exploits
Checking GitHub for proof-of-concept code…
