CVE-2026-111057 - Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass
CVE ID :CVE-2026-111057 Published : Oct. 19, 2026, 4:17 p.m. | 1 hour, 48 minutes ago Description :Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and...