JH
Vendor
jhuckaby
4
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-58255 New | CR Cronicle jhuckaby | 8.8 | Oct 27 | Cronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401 |
| CVE-2026-55562 | CR Cronicle jhuckaby | 9.0 | Oct 13 | Cronicle: Stored XSS in admin Activity Log via account full_name field |
| CVE-2026-39401 | CR Cronicle jhuckaby | 5.4 | Apr 7 | Privilege Escalation via update_event Job Output in Cronicle |
| CVE-2026-39400 | CR Cronicle jhuckaby | 6.1 | Apr 7 | Stored XSS via Job HTML/Table Output in Cronicle |