All packages
Squirro Cognitive Search vulnerabilities
3 known CVE vulnerabilities in Squirro Cognitive Search, translated and rated.
- CVE-2026-50772Critical
An issue in Squirro Cognitive Search versions prior to 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload sent to the password reset function. The vulnerability can be exploited to take control of the application.
- CVE-2026-50770Critical
An issue in Squirro Cognitive Search before version 3.14.2 allows a remote attacker to escalate privileges via a crafted request. This vulnerability enables unauthorized elevation of access levels.
- CVE-2026-50771Medium
Squirro Cognitive Search before 3.14.2 has a Cross Site Scripting (XSS) vulnerability that allows a remote attacker to execute arbitrary code via the Email Notification, Create Evaluation Sets and HTML Editor functions.