PatchSiren

Countly CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Countly CVE published 2026-10-16

CVE-2026-44977

A critical vulnerability exists in countly-server, part of the Countly product analytics solution. Prior to versions 24.05.50 and 25.03.44, a non-global application administrator can exploit this issue to store active content, which can then be executed by a global administrator, potentially exposing authenticated session capabilities. This issue requires immediate attention, especially for environments w [truncated]