search
skyeye
Trends
- 1Two critical unpatched flaws hit Dromara Skyeye●🔴 Dromara Skyeye — 2× CVSS 9.8, no patch, PoC public CVE-2026-107779 — missing auth in xxl-job-admin (CWE-306) → /jobinf
Security researchers are warning about two vulnerabilities in Dromara Skyeye, both rated CVSS 9.8 and currently unpatched. One flaw, CVE-2026-107779, stems from missing authentication in the bundled xxl-job-admin component, letting attackers start GLUE_SHELL jobs and achieve remote code execution on executor hosts. The second, CVE-2026-107780, is an OS command injection in a TTS endpoint. A public proof-of-concept exploit exists, raising fears of widespread exploitation before fixes arrive.
- 2New CVE Issued for Dromara Skyeye Software●CVE Alert: CVE-2026-107781 - dromara - skyeye - https://www. redpacketsecurity.com/cve-aler t-cve-2026-107781-dromara-sk
A new vulnerability identifier, CVE-2026-107781, has been published affecting dromara's skyeye software. Security feeds picked up the advisory and are circulating it under threat intelligence and OSINT tags. Details on severity, affected versions and available patches remain limited, so administrators using the software are expected to watch for follow-up guidance from maintainers.