Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-90999

Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment

cve-program · severity unknownCVSS unknownCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-90999

Published

Sentry Seer is vulnerable to a multi-stage trust-boundary violation that allows unauthenticated attacker-controlled telemetry to become code that is executed by an agent in a privileged automation environment. An external attacker can submit fabricated Sentry events without having access to the victim’s Sentry account, source repository, or infrastructure.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-90999

Published

Sentry Seer

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Functional Software, Inc.",
                    "product": "Sentry Seer",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "Web site"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON