Tag
critical
advisory
Critical Unauthenticated RCE in PhoenixStorybook via HEEx Template Injection (CVE-2026-8467)
2 rules 5 TTPs 1 CVEA critical unauthenticated remote code execution vulnerability (CVE-2026-8467) in Phenix Digital's `phoenix_storybook` versions 0.5.0 through 1.0.x allows attackers to inject arbitrary Elixir code via unsanitized WebSocket input, leading to OS command execution.
PoC
phoenix_storybook
rce
web-vulnerability
elixir
phoenix
websocket
template-injection
linux
2r
5t
1c
updated
medium
advisory
Phoenix Long-Poll Transport Denial-of-Service Vulnerability
2 rules 2 TTPs 1 CVEAn unauthenticated denial-of-service vulnerability in Phoenix's long-poll transport allows a remote client to exhaust server memory by sending a series of crafted HTTP requests, affecting LiveView apps with a public Longpoll socket or Phoenix.Socket with longpoll option.
Phoenix
dos
webserver
2r
2t
1c