CVE-2026-37470

7.3 highEPSS 0.3%

High (7.3). EPSS 0.3% chance of exploitation in the next 30 days.

An issue in ClipBucket v5 v.5.5.2 allows an attacker to execute arbitrary code via the Authentication interface, login page endpoint and HTTP response security headers components

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-1021
Published: 2026-05-22
Modified: 2026-07-23
Record from: the NVD, synced 2026-10-19

References

https://medium.com/@arpit03sharma2003/cve-2026-37470-clickjacking-vulnerability-in-clipbucket-v5-leads-to-credential-theft-and-8415def7804a

Check your stack JSON