CVE-2026-111058 | mljar Mercury up to 3.2.5 WebSocket Wrapper /api/kernels improper authorization (EUVD-2026-104420)

October 19, 2026 Yanac

A vulnerability was found in mljar Mercury up to 3.2.5. It has been declared as critical. The affected element is an unknown function of the file /api/kernels of the component WebSocket Wrapper. Executing a manipulation can lead to improper authorization.

This vulnerability appears as CVE-2026-111058. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More