A vulnerability, which was classified as problematic, was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of the component Remotedev Server. The manipulation of the argument action results in code injection. This vulnerability is identified as CVE-2026-117526. The attack is only possible with local... Weiterlesen: CVE-2026-117526 | reduxjs redux-devtools 5.0.0 Remotedev Server evalA…
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-117526 | reduxjs redux-devtools 5.0.0 Remotedev Server evalAction action code injection (Issue 2125)
A vulnerability, which was classified as problematic, was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
CISA-SSVC-Triage (vulnrichment)CVE-2026-117526
Exploitation: poc (PoC verfügbar)Automatable: no (Nicht automatisierbar)Technical Impact: partial (Teilweise)
Quelle: CISA-ADP vulnrichment · Stand 2026-11-03T11:59:43.776343Z · CISA Coordinator
Advisory Radar
In herstellerseitiger Prüfung
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
- Keine herstellerspezifischen Bulletins in der Primärquelle hinterlegt.
Intelligence Digest gratis Dagelijks het belangrijkste beveiligingsnieuws · kan op elk moment worden opgehaald
Community Rating & Social Proof
⭐ Leser-Wertung
Was deze pagina nuttig?