CVE-2026-50772

42th percentile - higher than 42% of all known CVEs

An issue in Squirro Cognitive Search versions prior to 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload sent to the password reset function. The vulnerability can be exploited to take control of the application.

An attacker can exploit the password reset function to execute malicious code, potentially leading to data confidentiality breach or full system takeover.

Update Squirro Cognitive Search to version 3.14.2 or later. Additionally, secure the password reset function by implementing rate limiting and input validation.