CyberSecBulletin

Alseambusher vulnerabilities

We track 2 vulnerabilities in Alseambusher products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 10, 2026.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Alseambusher vulnerabilities

  • 9.8 Critical severity

    crontab-ui: Improper Neutralization of CRLF Sequences

    CVE-2026-72590AlseambusherEPSS 2.04%

    An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted GET request to /crontab with URL-encoded newlines in the env_vars parameter.

  • 9.8 Critical severity

    crontab-ui: Improper Neutralization of Special Elements used in an OS Command

    CVE-2026-72589AlseambusherEPSS 1.95%

    An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to execute arbitrary system commands by importing a crafted crontab database file. The POST /import endpoint accepts arbitrary .db files an