CVE-2026-41582 | Countly countly-server up to 24.05.49/25.03.43 Local Filesystem Backend frontend/express/app.js getStats/getStream information disclosure

October 16, 2026 Yanac

A vulnerability was found in Countly countly-server up to 24.05.49/25.03.43. It has been declared as problematic. This vulnerability affects the function getStats/getStream of the file frontend/express/app.js of the component Local Filesystem Backend. Executing a manipulation can lead to information disclosure.

This vulnerability is handled as CVE-2026-41582. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More