SECURITYMay 27 · 12:00 UTCTHE REGISTER

How to guarantee a speaker gig: Hack the system. Literally

A security researcher exploited a stored XSS vulnerability (CVE-2026-41241) in pretalx, a conference management tool, to auto-apply for and secure 40 speaker slots. The flaw allowed injecting malicious code via searchable fields, enabling unauthorized actions in the organizer interface. The vulnerability was patched in pretalx 2026.1.0, and the researcher validated findings responsibly without harming live systems.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

Elad MegedpersonNoveeorganizationpretalxorganizationCVE-2026-41241topicOffensiveConorganizationTROOPERSorganizationFOSDEMorganizationHEXACONorganization

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYMay 4 · 11:28 UTC
CISA says ‘Copy Fail’ flaw now exploited to root Linux systems
SECURITYMay 14 · 07:34 UTC
New Fragnesia Linux flaw lets attackers gain root privileges
SECURITYMay 12 · 16:44 UTC
New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution
SECURITYMay 1 · 16:55 UTC
Severe Linux Copy Fail security flaw uncovered using AI scanning help
SECURITYApr 28 · 21:07 UTC
Hackers are exploiting a critical LiteLLM pre-auth SQLi flaw
SECURITYMay 19 · 21:06 UTC
Windows Zero-Day Barrage Continues After Patch Tuesday