Security Advisory

CVE-2026-5426

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-16 15:18:46

Last updated 2026-05-27 14:53:16

Assigner Mandiant

CVSS score not scored

State PUBLISHED

Description

Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanisms and achieve remote code execution via malicious ViewState deserialization attacks

← Browse all CVEs View on cve.org ↗