LG webOS sync-demo Preauth RCE
https://ift.tt/oh2zrwN
Submitted October 12, 2026 at 02:28PM by SSDisclosure
via reddit https://ift.tt/ZI7Vu6W
Post #366265
38
Forwarded from Netsec
SSD Secure Disclosure LG webOS sync-demo Preauth RCE - SSD Secure Disclosure Summary This report covers a fullchain built from sync-demo LG-signed manifest replay client-key issuance bypass, cmp-client interactiveUrl PalmServiceBridge SSRF, and pmlogd collectAllLog targetDir command injection. First, the attacker replays the LG-signed…