vulnerabilities
Pre-auth RCE, trivial exploitation, a massive blast radius...
Ye Olde Fashioned authentication filters in a Groovy codebase to blame.
The Stack speaks to those at the centre of the community's latest week-long debate on vulnerability disclosure and open source patching.
Security
|
Sep 26, 2025
CISA: "Permanently disconnect these devices on or before September 30, 2025"
Expect this to get exploited - like the bug before it...
The bug was discovered by its government-backed attacks focused research group.
Dassault Systèmes software used by major manufacturers including Boeing supplier.