All Detections

Marimo Notebook Pre-Auth RCE via /terminal/ws WebSocket (CVE-2026-39987)

avatar
Ibrahim Saud@tektrix
updated 22 days ago001

Detects unauthorized attempts to access the Marimo Notebook terminal via a WebSocket connection, indicative of an exploit attempt targeting CVE-2026-39987.

Suricata