CVE WATCH / VULNERABILITY DETAIL
CVE-2026-111058
CRITICALCVSS 9.8NVD feed
Published 19 October 2026 · tracked since 20 October 2026
Description
Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow anonymous clients to create Jupyter kernels and send execute_request messages containing arbitrary Python. The endpoint blocklist does not cover /api/ke
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-110674
- CVE-2026-110676
- CVE-2026-109434 MEDIUM 4.3
- CVE-2026-55644
- CVE-2026-3303 LOW 3.7
- CVE-2026-4413 MEDIUM 6.1
- CVE-2026-11319 MEDIUM 6.2
- CVE-2026-111755
- CVE-2026-111759 HIGH 7.5
- CVE-2026-107084