CVE-2026-85076 - Cronicle: Privilege Escalation via Arbitrary Environment Variable Injection through Event Params (Incomplete Fix for CVE-2026-39401)
CVE ID :CVE-2026-85076 Published : Nov. 5, 2026, 9:18 p.m. | 1 hour, 50 minutes ago Description :Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.124, an authenticated non-admin with run_events, create_events, or edit_events privilege can...