CVE-2026-75430
PowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer HTTP endpoint without authentication on the default transport port. This allows a remote attacker to execute arbitrary code.
- Published Sep 4, 2026
- CVSS 9.8 critical
- 1.2% chance of exploitation in the next 30 days (EPSS)