CVE-2026-67208P1CRITICALCVSS 9.8PoC≤ 1.6.02026-07-30
CVE-2026-67208 [CRITICAL] CWE-306 CVE-2026-67208: Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remo
Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to the exposed H2 database web console using default shipped credentials. Attackers can access the unprotected /h2-console endpoint, authenticate with default credentials, and leverage the
nvd