Critical Remote Code Execution Vulnerability Disclosed on U.S. Election Assistance Commission Website
Cybersecurity firm XBOW disclosed that it discovered a critical remote code execution (RCE) vulnerability in a publicly accessible web application for the U.S. Election Assistance Commission (EAC), which can be exploited without authentication. The application is used for resource and logistics calculations, and is not a voting machine or voter registration system.
