Vulnerabilities

TI-2026-50847 CVE-2026-72590 · GHSA-25qx-69jj-jfcj

alseambusher crontab-ui - Unauthenticated RCE via Newline Injection in env_vars Parameter

MEDIUM 53

An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted GET request to /crontab with URL-encoded…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02043 Published 2026-08-10 No fix listed CWE-93

TI-2026-50846 CVE-2026-72589 · GHSA-r4j6-x8h7-4f8w

alseambusher crontab-ui - Unauthenticated RCE via Shell Injection in Imported Database hook Field

MEDIUM 53

An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to execute arbitrary system commands by importing a crafted crontab database file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01947 Published 2026-08-10 No fix listed CWE-78

Vulnerabilities

Filters

alseambusher crontab-ui - Unauthenticated RCE via Newline Injection in env_vars Parameter

alseambusher crontab-ui - Unauthenticated RCE via Shell Injection in Imported Database hook Field