CVE-2026-37470: High severity ClipBucket ClipBucket V5 vulnerability
Published May 22, 2026
·Updated
An issue in ClipBucket v5 v.5.5.2 allows an attacker to execute arbitrary code via the Authentication interface, login page endpoint and HTTP response security headers components
Affected Software
1 affected component
ClipBucket ClipBucket V5=5.5.2
Event History
May 22, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-37470?
The severity of CVE-2026-37470 is rated as high with a CVSS score of 7.3.
2
How do I fix CVE-2026-37470?
To fix CVE-2026-37470, ensure that you upgrade to the latest version of ClipBucket as recommended by the vendor.
3
What are the potential impacts of CVE-2026-37470?
CVE-2026-37470 can allow attackers to execute arbitrary code, leading to unauthorized access and potential data breaches.
4
Is CVE-2026-37470 related to clickjacking?
Yes, CVE-2026-37470 has been linked to a clickjacking vulnerability that can lead to credential theft.
5
What components of ClipBucket are affected by CVE-2026-37470?
CVE-2026-37470 affects the Authentication interface, login page endpoint, and HTTP response security headers in ClipBucket.