CVE-2026-90999

9.8 Critique

Publiée le 16/09/2026 à 18:17 · Modifiée le 18/09/2026 à 19:49 · Analyse NVD reportée · Source : cret@cert.org

Description

Sentry Seer is vulnerable to a multi-stage trust-boundary violation that allows unauthenticated attacker-controlled telemetry to become code that is executed by an agent in a privileged automation environment. An external attacker can submit fabricated Sentry events without having access to the victim’s Sentry account, source repository, or infrastructure.

Traduire en français

Produits concernés

Functional Software, Inc. Sentry Seer

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.8 Critique	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-20
CWE-74
CWE-94
CWE-116
CWE-913

Références

https://kb.cert.org/vuls/id/212479
https://www.kb.cert.org/vuls/id/212479

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories