TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8778
@thehackernews
The Hacker News
Post content
Post content
⚠️ Marimo CVE-2026-39987 gave attackers a full shell with no authentication. A missing check in /terminal/ws allowed remote code execution on exposed systems. Exploitation began within 9 hours of disclosure—no PoC needed. 🔗 Details here → https://thehackernews.com/2026/04/marimo-rce-flaw-cve-2026-39987.html