CVE-2026-62853 - ThingLinks vulnerable to authenticated remote code execution via Groovy script registration in ThingLinks
CVE ID :CVE-2026-62853 Published : Oct. 30, 2026, 9:17 p.m. | 44 minutes ago Description :ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` endpoint accepts user-supplied Groovy script content and passes it to an unsandboxed `Groovy compilation...