CVE-2026-50772: Squirro Squirro Cognitive Search vulnerability
Published Aug 17, 2026
·Updated
An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset function.
Affected Software
1 affected component
Squirro Squirro Cognitive Search<3.14.2
Event History
Aug 17, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2026-50772?
CVE-2026-50772 has a risk score of 89, indicating a high severity vulnerability.
2
How do I fix CVE-2026-50772?
To fix CVE-2026-50772, upgrade Squirro Cognitive Search to version 3.14.2 or later.
3
What are the potential risks of CVE-2026-50772?
CVE-2026-50772 allows remote attackers to execute arbitrary code, posing significant security risks to affected systems.
4
Which versions of Squirro are affected by CVE-2026-50772?
Squirro Cognitive Search versions prior to 3.14.2 are affected by CVE-2026-50772.
5
When was CVE-2026-50772 published?
CVE-2026-50772 was published on August 17, 2026.