CVE-2026-37470
- State
- Published
- Severity
- 7.3 High
- Published
- May 22, 2026
- Updated
- Jul 5, 2026
- Reserved
- Apr 6, 2026
Description
An issue in ClipBucket v5 v.5.5.2 allows an attacker to execute arbitrary code via the Authentication interface, login page endpoint and HTTP response security headers components
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.3 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N | CISA-ADP |
Weaknesses
- CWE-1021 Improper Restriction of Rendered UI Layers or Frames
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.