CVE-2026-111058criticalCWE-862

CVE-2026-111058: critical vulnerability in mljar mercury

Mercury: Unauthenticated Remote Code Execution via /api/kernels

Published

Follow this CVE+ Monitor mercury+ Monitor mercury

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

48Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 9.8epss 0.5%
from disclosure to weapon1 day
Published on NVDOct 19
1st PoC+1d
Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow anonymous clients to create Jupyter kernels and send execute_request messages containing arbitrary Python. The endpoint blocklist does not cover /api/kernels, and the websocket wrapper previously tracked idle activity without authorizing executable messages. This issue is fixed in version 3.2.6.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
mljar · mercury
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — mljar mercury

In the same product, most dangerous first.

CVE-2026-111057CRITICALMercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypassEPSS 0.7%CVE-2026-111059MEDIUMMercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTMLEPSS 0.3%