cveboard RSS feed

CVE-2026-49994

cve.nowCritical

dannymcc bluehood

  • dannymcc bluehood
  • Critical
  • CVSS 9.1
  • EPSS 0.28%
  • No fixed version listed

What to do

No fixed version listed

Plain text

Affected products

ProductAffectedFixed in
dannymcc bluehood< 0.7.1None listed

Scores and signals

Exploitation
No known exploitation
Severity
Critical, CVSS 9.1 (v3.1, scored by GitHub_M)
EPSS
0.28% chance of exploitation in the next 30 days (EPSS from FIRST, as of Oct 26, 2026)
CISA's SSVC decision points
Exploitation: none. Automatable: yes. Technical impact: total. As of Sep 28, 2026.
Weakness
CWE-306: Missing Authentication for Critical Function; CWE-862: Missing Authorization
Vendor
dannymcc, bluehood

Timeline

  1. First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.

Sources

All live incidents