All 3 CVE vulnerabilities found in mercury, with AI-generated Chinese analysis, references, and POCs.
Vendor: mljar
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-111059 | Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML CWE-79 | 6.1 | Medium | 2026-10-19 |
| CVE-2026-111058 | Mercury: Unauthenticated Remote Code Execution via /api/kernels CWE-862 | 9.8 | Critical | 2026-10-19 |
| CVE-2026-111057 | Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass CWE-185 | 10.0 | Critical | 2026-10-19 |
All 3 known CVE vulnerabilities affecting mercury with full Chinese analysis, references, and POCs where available.