Threats tagged 'ghsa-25qx-69jj-jfcj'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 2.0%	CVE-2026-72590alseambusher/crontab-ui · OS Command Injection Vulnerability Critical9.8EPSS 2.0%2026-08-10GCVE DatabaseCVE-2026-72590 An OS command injection vulnerability exists in alseambusher/crontab-ui through version 0.4.2. This flaw allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted GET request to the /crontab endpoint with URL-encoded newlines in the env_vars parameter. The vulnerability has a critical severity with a CVSS score of 9.8. EPSS 2.0%Report on CVE-2026-72590 Vulnerability CWE-93 #ghsa-25qx-69jj-jfcj	GCVE Database	2026-08-10

Page 1 of 1