CVE-2026-75430
Received Received - Intake

Arbitrary Code Execution in PowerJob Worker

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: MITRE

Description
PowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer HTTP endpoint without authentication on the default transport port. This allows a remote attacker to execute arbitrary code.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-05
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-75430
EUVD
EUVD-2026-71612

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
powerjob worker From 5.1.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

PowerJob Worker version 5.1.2 and earlier has an unauthenticated HTTP endpoint /worker/deployContainer on the default transport port. This allows remote attackers to execute arbitrary code without needing credentials.

Detection Guidance

Check if the /worker/deployContainer endpoint is accessible without authentication by using curl or similar tools to send a request to the default transport port. Example: curl -v http://<target-ip>:<port>/worker/deployContainer. If the endpoint responds without requiring credentials, the system is likely vulnerable.

Impact Analysis

An attacker could exploit this to run malicious code on your system, potentially stealing data, installing malware, or disrupting operations. The high CVSS score (9.8) indicates severe risk.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection (GDPR) and healthcare data (HIPAA) due to unauthorized code execution risks and potential data breaches.

Mitigation Strategies

Immediately restrict access to the /worker/deployContainer endpoint by implementing authentication or firewall rules to block external access. Update PowerJob Worker to the latest version if a patch is available. Monitor network traffic for suspicious activity targeting this endpoint.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-75430. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart