⤷ Title: 10.0 CVSS Flaw in Kestra Grants Full Server Control
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 14:02:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_34612 #cybersecurity #DevOps #infosec #Infrastructure as Code #Kestra #Orchestration Security #PostgreSQL #rce #sql injection #Stacked Queries
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 14:02:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_34612 #cybersecurity #DevOps #infosec #Infrastructure as Code #Kestra #Orchestration Security #PostgreSQL #rce #sql injection #Stacked Queries
Daily CyberSecurity
10.0 CVSS Flaw in Kestra Grants Full Server Control
CVE-2026-34612: A critical 10.0 flaw in Kestra allows RCE via SQL injection in label searches. Protect your orchestration server—update to v1.3.7 now!