REDCap CVE-2026-90817 unauthenticated RCE exploited via public surveys

[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Cybersecurity News · markdown

exploited (researcher), not on KEV2026-10-13

REDCap CVE-2026-90817 unauthenticated RCE exploited via public surveys

Unit 42 reports attacks dropping a webshell then a fileless XMRig miner. Fixed in 16.0.49, 17.3.10 and 17.4.4. Not in CISA KEV as of Oct 13; NVD has no entry yet.

Sources: Unit 42 (via @Unit42_Intel)