CVE-2025-69516
CVSS 8.8 HIGH: a Server-Side Template Injection (SSTI) vulnerability in the /reporting/templates/preview/ endpoint of Amidaware… EPSS 2% (83º percentile).
Vulnerabilità ed exploit · Attacco ad app web
Metasploit ha pubblicato moduli exploit per una Jinja2 SSTI in Tactical RMM (CVE-2025-69516) e per una command injection non autenticata in MajorDoMo (CVE-2026-27175). I moduli pubblici riducono lo sforzo dell'attaccante e aumentano il rischio per deployment esposti a internet o mal isolati.
1 fonte · 6 mar
CVSS 8.8 HIGH: a Server-Side Template Injection (SSTI) vulnerability in the /reporting/templates/preview/ endpoint of Amidaware… EPSS 2% (83º percentile).
Rapid7
Metasploit Wrap-Up 03/06/2026
Explore the latest Metasploit Framework release focusing on enhanced payloads, new encoder options, and fresh RCE exploits, including Tactical RMM SSTI and MajorDoMo command injection.
originalePart of the PlainSec briefing for 2026-03-07
Every edition of this story: Metasploit pubblica exploit per Tactical RMM e MajorDoMo