Vulnerabilities

TI-2026-85660 CVE-2026-85076

Environment variable injection in Cronicle event params

LOW 39

Cronicle is a multi-server task scheduler and runner, with a web based front-end UI.

CVSS 4.0CRITICAL 9.0 Network Low privileges No interaction EPSS 0.004 Published 2026-11-05 Fixed in 0.9.124 CWE-74

TI-2026-81575 CVE-2026-58255

MEDIUM 40

Cronicle is a multi-server task scheduler and runner, with a web based front-end UI.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00415 Published 2026-10-27 Fixed in 0.9.121 CWE-269

TI-2026-71909 CVE-2026-55562

HIGH 74

Cronicle is a multi-server task scheduler and runner, with a web based front-end UI.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00463 Published 2026-10-13 Fixed in 0.9.119 CWE-79