Vulnerabilities in browserstack

3 results

CVE-2026-48723HIGHBrowserStack Cypress CL: Command Injection via cypress_config_file leads to arbitrary code execution through malicious browserstack.jsonEPSS 0.5%CVE-2026-49143HIGHBrowserStack Runner 0.9.5 Unauthenticated RCE via /_log HTTP HandlerEPSS 0.4%CVE-2026-49144HIGHBrowserStack Runner 0.9.5 Path Traversal via _default HTTP HandlerEPSS 0.2%