Loading...
On October 29, cybersecurity company XBOW disclosed a critical remote code execution vulnerability in a web application of the Election Assistance Commission (EAC). The vulnerability did not affect voting machines or voter registration systems. Attackers could execute code with root privileges in the backend container by crafting web requests. Following XBOW's report, the Election Assistance Commission has patched the vulnerability.