CVE-2026-42557
jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content
CVSS score
8.6
EPSS probability
%0.7
Risk score
0.1
Published
5 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
10.0
CVE-2026-44181
Vulnerability in Jupyter Enterprise Gateway
J
Patch status unknown Public Exploits:1EPSS %1
8.8
CVE-2026-42266
JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request.
J
Patch verifiedEPSS %1
9.8
CVE-2026-44180
Improper input validation in Jupyter Enterprise Gateway
J
Patch status unknown Public Exploits:1EPSS %1
8.6
CVE-2026-73417
JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)
J
Patch verifiedEPSS %1
10.0
CVE-2026-44182
Vulnerability in Jupyter Enterprise Gateway
J
Patch status unknown Public Exploits:1EPSS %1
8.8
CVE-2026-33175
Improper authentication in Jupyter Oauthenticator
J
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-42557"