CVE-2026-75429
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PowerJob 4.x 至 5.1.2 版本中，Server-Worker 传输层的 端点存在未认证的远程代码执行（RCE）漏洞。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-75429
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2026-75429
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-75429
请登录查看更多情报信息。
Proof of Concept for CVE-2026-75429 (1)
Other References for CVE-2026-75429 (1)
Same Patch Batch · n/a · 2026-09-04 · 43 CVEs total
| CVE-2026-75430 | 9.8 CRITICAL | PowerJob Worker 5.1.2 远程代码执行漏洞 |
| CVE-2026-75431 | 9.1 CRITICAL | PowerJob Server 5.1.2 JWT密钥可预测致远程代码执行 |
| CVE-2026-85401 | 6.3 MEDIUM | Dolibarr Legacy File Manager config.inc.php access control |
| CVE-2026-79391 | Trueview 6.0.23.4 MQTT服务未认证漏洞 | |
| CVE-2021-44320 | Parrot AR.Drone 1/2 存在DoS漏洞 | |
| CVE-2026-79389 | Trueview T18161 S 6.0.23.4 MQTT消息验证漏洞 | |
| CVE-2026-75439 | Free5GC v4.2.2 UPF组件远程拒绝服务漏洞 | |
| CVE-2026-79426 | CRMEB 6.0.0 任意文件删除漏洞 | |
| CVE-2026-79423 | SeaCMS v13.6管理配置组件RCE漏洞 | |
| CVE-2022-26961 | Italtel NetMatch-S 5.0.0 多个存储型XSS漏洞 | |
| CVE-2025-67066 | oasys sysoa 1.0 /outaddresspaging SQL注入 | |
| CVE-2026-50894 | easyadmin v2.0.2.2 任意文件上传漏洞 | |
| CVE-2026-71625 | ThinkSNS+ v2.4 重置密码组件权限提升漏洞 | |
| CVE-2026-71626 | Invoice Ninja v5.13.24 远程敏感信息泄露漏洞 | |
| CVE-2026-71624 | esoTalk 1.0.0g4 远程代码执行 | |
| CVE-2026-71622 | Zhao-github APiAdmin 5.0.1 User.php 组件 SQL注入漏洞 | |
| CVE-2026-78839 | MachForm v30任意文件上传导致代码执行 | |
| CVE-2026-71620 | ApiAdmin 5.0.1 文件上传导致远程代码执行 | |
| CVE-2021-44319 | Parrot AR.Drone 1/2 无线认证拒绝服务漏洞 | |
| CVE-2026-78849 | pfSense 2.8.1及以下版本跨站脚本漏洞 |
Showing top 20 of 43 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-75429
No comments yet