CVE-2026-73992

CriticalCVSS 9.9

Published: 20/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Summary

Subscriber Remote Code Execution (RCE) vulnerability in the Query Wrangler plugin. Affects versions up to 1.5.57.

A user with low privileges can execute arbitrary code on the server, potentially leading to full system compromise.

Immediately update the Query Wrangler plugin to the latest version and restrict user permissions.

Original NVD description (English source)

Subscriber Remote Code Execution (RCE) in Query Wrangler <= 1.5.57 versions.