CVE-2026-85076 | jhuckaby Cronicle up to 0.9.123 Event API lib/api.js command injection

November 5, 2026 Yanac

A vulnerability marked as critical has been reported in jhuckaby Cronicle up to 0.9.123. Affected by this vulnerability is an unknown functionality of the file lib/api.js of the component Event API. Performing a manipulation results in command injection.

This vulnerability was named CVE-2026-85076. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More