Cybersecurity firm XBOW disclosed an unauthenticated, critical-severity remote code execution vulnerability in a public web application of the U.S. Election Assistance Commission. According to ChainCatcher, the application is used for resource and logistics calculations and is not a voting machine or voter registration system.