Skip to content
Threat Feed
Subscribe

Tag

Agent

2 briefs RSS
high advisory

Serena Agent Unauthenticated RCE via DNS Rebinding (CVE-2026-49471)

An unspecified attacker can achieve remote code execution in Serena agent versions prior to 1.5.2 by leveraging an unauthenticated Flask dashboard, DNS rebinding, and memory poisoning, enabling persistent attacker-controlled command execution.

serena-agent remote-code-execution dns-rebinding persistence command-and-control python flask agent
1r 6t 1c 1i
high advisory

Acronis Cyber Protect Cloud Agent Multiple Vulnerabilities Allow Privilege Escalation

Multiple vulnerabilities in Acronis Cyber Protect Cloud Agent can be exploited by a local or remote, authenticated attacker to escalate privileges.

Cyber Protect Cloud Agent privilege-escalation acronis agent
2r 1t 2c