Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects HTTP POST requests to the Appsmith password reset endpoint where the 'Origin' header does not match the expected internal or legitimate application domain. This is indicative of an attempt to exploit CVE-2026-22794 to achieve account takeover.
avatar
Tim Peck@timpeck
avatar
SecOps Signals
9 months ago
1025