CRITICAL
Countly
CVE published 2026-10-16
CVE-2026-44977
A critical vulnerability exists in countly-server, part of the Countly product analytics solution. Prior to versions 24.05.50 and 25.03.44, a non-global application administrator can exploit this issue to store active content, which can then be executed by a global administrator, potentially exposing authenticated session capabilities. This issue requires immediate attention, especially for environments w [truncated]