Functional Software, Inc. vulnerabilities
Published CVEs affecting Functional Software, Inc. products: 1 record(s), with severity, exploitation and fixes.
CVE-2026-90999
Critical · 9.8
CWE-20 Sep 16, 2026
Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment
Sentry Seer is vulnerable to a multi-stage trust-boundary violation that allows unauthenticated attacker-controlled telemetry to become code that is executed by an agent in a privileged automation environment. An external attacker can submit fabricated Sentry events without having access to the victim’s Sentry account, source repository, or infrastructure.