What’s Vulnerable › Products

jhuckaby Cronicle vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your jhuckaby Cronicle version is affected

Latest jhuckaby Cronicle vulnerabilities

• CVE-2026-58255 — Cronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401 (CVSS 8.8)
• CVE-2026-55562 — Cronicle: Stored XSS in admin Activity Log via account full_name field (CVSS 9.0)
• CVE-2026-39401 — Privilege Escalation via update_event Job Output in Cronicle (CVSS 5.4)
• CVE-2026-39400 — Stored XSS via Job HTML/Table Output in Cronicle (CVSS 6.1)