深潮TechFlow|10月 29, 2026 13:52
[Severe Remote Code Execution Vulnerability Found on EAC Website] According to TechFlow, on October 29th, cybersecurity company XBOW disclosed a severe remote code execution vulnerability in a public web application belonging to the U.S. Election Assistance Committee (EAC). This vulnerability allows unauthenticated exploitation. The application is used for resource and logistics computation and is not a voting machine or voter registration system. The vulnerability could allow attackers to execute code with root privileges in a backend container by crafting specific web requests, gaining access to local protected resources and external networks. XBOW stated that it reported the issue in accordance with EAC's vulnerability disclosure policy, and after verification by the EAC team, the vulnerability was patched ahead of the upcoming U.S. midterm elections.
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink