Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

browserstack vulnerabilities

3 published CVEs name browserstack among the affected products.

Newest CVEs

  • CVE-2026-48723

    BrowserStack Cypress CL: Command Injection via cypress_config_file leads to arbitrary code execution through malicious browserstack.json

    browserstack · browserstack-cypress-cli

    High7.8
  • CVE-2026-49144

    BrowserStack Runner 0.9.5 Path Traversal via _default HTTP Handler

    browserstack · browserstack-runner

    High7.1
  • CVE-2026-49143

    BrowserStack Runner 0.9.5 Unauthenticated RCE via /_log HTTP Handler

    browserstack · browserstack-runner

    High8.7