Browse all 3 CVE security advisories affecting browserstack. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-48723 | BrowserStack Cypress CL: Command Injection via cypress_config_file leads to arbitrary code execution through malicious browserstack.json — browserstack-cypress-cli CWE-78 | 7.8 | High | 2026-06-15 |
| CVE-2026-49144 | BrowserStack Runner 0.9.5 Path Traversal via _default HTTP Handler — browserstack-runner CWE-22 | 6.5 | Medium | 2026-06-02 |
| CVE-2026-49143 | BrowserStack Runner 0.9.5 Unauthenticated RCE via /_log HTTP Handler — browserstack-runner CWE-94 | 8.8 | High | 2026-06-02 |
This page lists every published CVE security advisory associated with browserstack. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.