Lucene search
K

CVE-2026-49143

πŸ—“οΈΒ 05 Jun 2026Β 19:19:24Reported byΒ redhat.comTypeΒ 
redhatcve
Β redhatcve
πŸ”—Β access.redhat.comπŸ‘Β 4Β Views

Remote code execution in BrowserStack Runner via the _log handler allows unauthenticated attackers to run code with crafted JSON.

Related
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-49143
2 Jun 202620:31
–attackerkb
Circl
CVE-2026-49143
2 Jun 202622:00
–circl
CVE
CVE-2026-49143
2 Jun 202620:31
–cve
Cvelist
CVE-2026-49143 BrowserStack Runner 0.9.5 Unauthenticated RCE via /_log HTTP Handler
2 Jun 202620:31
–cvelist
EUVD
EUVD-2026-34029
3 Jun 202621:39
–euvd
Github Security Blog
browserstack-runner vulnerable to Remote Code Execution via vm sandbox escape in _log HTTP handler
3 Jun 202621:39
–github
NVD
CVE-2026-49143
2 Jun 202621:16
–nvd
OSV
GHSA-6VR3-7WCX-V5G5 browserstack-runner vulnerable to Remote Code Execution via vm sandbox escape in _log HTTP handler
3 Jun 202621:39
–osv
Positive Technologies
PT-2026-45857
2 Jun 202600:00
–ptsecurity
Positive Technologies
PT-2026-46086
3 Jun 202600:00
–ptsecurity
Rows per page

Data

Build on a solid foundation withΒ Vulners data

WeΒ provide theΒ essential building blocks forΒ cybersecurity solutions withΒ comprehensive, structured, andΒ constantly updated vulnerability andΒ exploits data

Api

Power your application withΒ Vulners API

The Vulners REST API offers reliable, high-performance access toΒ vulnerabilityΒ intelligence, withΒ 99.9%Β SLAΒ uptime andΒ CDN-backed data delivery forΒ seamlessΒ global access

App

Assess and manage vulnerabilities withΒ VulnersΒ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

05 Jun 2026 19:19Current
6.7Medium risk
Vulners AI Score6.7
CVSS 48.7
CVSS 3.18.8
EPSS0.00151
SSVC
4