---
id: "CVE-2023-29492"
kind: "vulnerability"
aliases: ["CVE-2023-29492"]
title: "3rdmill novi survey: Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the\u2026"
severity: "critical"
cvss: 9.8
epss: null
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Novi Survey Novi Survey", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "Novi Survey", "fixed": ["8.9.43676"], "affected": "< 8.9.43676", "ecosystem": "vendor"}, {"name": "3rdmill novi survey", "fixed": ["8.9.43676"], "affected": "< 8.9.43676", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["deserialization", "exploited", "novi-survey", "rce", "self-hosted", "vendor"]
not_affected_if: ["managed-hosting"]
published_at: "2023-04-11T05:15:07+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-29492", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-23T21:07:17+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29492", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# 3rdmill novi survey: Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the…

Novi Survey's installable (self-hosted) software has a remote code execution flaw (CVSS 9.8). Unauthenticated remote attackers can run code on the server as the service account. Survey and response data are not exposed directly. It is in CISA KEV (added 2023-04-13). The vendor-hosted service is not listed as affected.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Novi Survey Novi Survey affected ? fixed ?
- vendor:Novi Survey affected < 8.9.43676 fixed 8.9.43676
- vendor:3rdmill novi survey affected < 8.9.43676 fixed 8.9.43676

## How to check

Check the installed Novi Survey version on the server (admin/about page or the installed product version). Anything below 8.9.43676 is vulnerable.

## Fix

Upgrade the installation to Novi Survey 8.9.43676 or later. The vendor says there is no workaround for earlier versions.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-29492
- 2026-10-23T21:07:17+00:00 analyst — Vendor advisory (Apr 2023) says all installable versions < 8.9.43676 are affected, with no workaround; the fix is to upgrade. NVD and CISA KEV confirm exploitation. No public PoC link found.
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2023-29492

## Documents

- [advisory] Novi Survey security advisory Apr-2023 https://novisurvey.net/blog/novi-survey-security-advisory-apr-2023.aspx
- [describes] NVD CVE-2023-29492 https://nvd.nist.gov/vuln/detail/CVE-2023-29492

## From the sources

Novi Survey contains an insecure deserialization vulnerability that allows remote attackers to execute code on the server in the context of the service account.

CISA required action: Apply updates per vendor instructions.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_