Skip to content
Threat Feed
Subscribe

Product

REDCap (>= 13.3.0)

1 brief RSS
critical advisory

Critical Remote Code Execution in Vanderbilt REDCap via Survey Passthru

A critical unauthenticated RCE vulnerability (CVE-2026-90817) in Vanderbilt REDCap allows attackers to bypass routing restrictions through the '__passthru' parameter, enabling unauthorized access to administrative controllers.

REDCap cve-2026-90817 remote-code-execution vulnerability webserver
2r 1t 1c