Serious Remote Code Execution Vulnerability Discovered on U.S. Election Assistance Commission Website

Cybersecurity company XBOW has discovered a critical remote code execution vulnerability in a public web application of the U.S. Election Assistance Commission (EAC). This vulnerability can be exploited by unauthenticated users. The application is used for resource and logistics calculations, not for voting machines or voter registration systems. Attackers can execute code with root privileges in the backend container by crafting specific web requests, allowing access to local protected resources and external networks. XBOW has reported the issue according to the vulnerability disclosure policy published by the EAC, and after verification by the EAC team, the vulnerability has been fixed prior to the U.S. federal midterm elections.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.