CVE-2026-57315

HighCVSS 8.5/10Last modified Oct 25, 2026

Description

Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions.

Metrics

CVSS 3.1 8.5/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Jun 26, 2026
Last modified
Oct 25, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-573166.5Subscriber Sensitive Data Exposure in GetGenie <= 4.4.2 versions.CVE-2026-573177.1Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.2 versions.CVE-2026-573186.5Subscriber Sensitive Data Exposure in Site Reviews <= 8.0.11 versions.CVE-2026-573197.1Unauthenticated Cross Site Scripting (XSS) in FOX <= 1.4.8 versions.CVE-2026-57328.8Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 149.0.2, Firefox ESCVE-2026-573207.1Unauthenticated Cross Site Scripting (XSS) in BEAR <= 1.1.8 versions.CVE-2026-573217.1Contributor Arbitrary File Deletion in H5P <= 1.17.7 versions.CVE-2026-573227.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs weMail wemail allows Reflected CVE-2026-573235.8Unauthenticated Broken Access Control in Flash & HTML5 Video <= 2.11.0 versions.CVE-2026-573246.5Unauthenticated Broken Access Control in GIFT4U <= 1.0.10 versions.CVE-2026-573257.1Unauthenticated Cross Site Scripting (XSS) in NanoMag <= 1.8 versions.CVE-2026-573266.1Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.
CVE-2026-57315: High severity, CVSS 8.5 | Vulnix