The website of the U.S. Election Assistance Commission has been disclosed to have a serious remote code execution vulnerability

The cybersecurity company XBOW disclosed that it has found a critical remote code execution vulnerability in a publicly accessible web application of the U.S. Election Assistance Commission (EAC) that can be exploited without authentication.

This application is used for resource and logistics calculation, not for voting machines or voter registration systems.