CVE-2026-66613

JetEngine plugin ≤ 3.8.14 allows unauthenticated remote code execution. CVSS 9.8 (CRITICAL). PatchStack documented it. No exploitation evidence or fixed version provided in documents. Upgrade to latest plugin version as precautionary measure. Monitor vendor announcements for official patch release.