PatchSiren

alseambusher CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL alseambusher CVE published 2026-08-10

CVE-2026-72589

The CVE-2026-72589 record describes an OS command injection vulnerability in alseambusher/crontab-ui through version 0.4.2. This vulnerability allows an unauthenticated remote attacker to execute arbitrary system commands by importing a crafted crontab database file via the POST /import endpoint, which accepts arbitrary .db files and overwrites the application database without validation. The vulnerabilit [truncated]