https://feed.craftedsignal.io/products/desktop-alert-v5.4.98.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 26 Oct 2026 22:07:01 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-10-alertus-desktop-alert-rce/Mon, 26 Oct 2026 22:07:01 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-alertus-desktop-alert-rce/A public proof-of-concept (PoC) exists for CVE-2026-38903, an unauthenticated remote HTML injection vulnerability in Alertus Desktop Alert v5.4.98.0. The vulnerability stems from a certificate validation bypass that allows attackers to render arbitrary HTML and execute JavaScript within a Trident WebBrowser control.<p>Alertus Desktop Alert v5.4.98.0 for Windows is susceptible to remote HTML injection due to a failure in the PKI module to validate certificate chains. An attacker who can redirect DNS resolution can serve forged responses signed with an attacker-generated key. The client renders this input in a Trident (IE) WebBrowser control without sanitization, enabling JavaScript execution, protocol handler navigation, and the spawning of registered executables.</p> mediumadvisoryHTML injectioncertificate validation bypass