Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-129165 1 Amidaware 1 Tactical Rmm 2026-11-13 9.1 Critical
Tactical RMM 0.17.0 through 1.6.1 contains an arbitrary file read in the /reporting/templates/preview/ endpoint because WeasyPrint resolves file:// links in user-supplied template_md and embeds the files in the returned PDF. Users with report management permission can read the Django SECRET_KEY, reused as the NATS password, and publish runscript commands to every managed agent.