PT-2026-133439

CVE-2026-116366 first CVE on my name just dropped. unauthenticated RCE on any @ClickHouseDB instance using just the public service hostname. special thanks to San and the ClickHouse security team. the report was accepted within 20 minutes on Bugcrowd. P.S. Clickhouse Security Team emailed me 1 ho...