CVE-2026-55089Proof of concept (PoC) published · CISA
Etherpad: JWT `admin` claim presence-only check lets non-admin OAuth users invoke every Etherpad HTTP API endpoint
CVSS score
9.9
EPSS probability
%0.5
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.6
CVE-2026-55085
Etherpad: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in etherpad-lite
E
Patch status unknownEPSS %0
6.1
CVE-2026-55087
Etherpad: x-proxy-path header reflected into admin HTML/JS/CSS (cache-poisoning XSS) and concatenated into redirect (open-redirect)
E
Patch verified Public Exploits:1EPSS %1
6.8
CVE-2026-55088
Etherpad: Device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token
E
Patch verifiedEPSS %0
5.3
CVE-2026-55090
Etherpad: Stored XSS in HTML export via unescaped attribute-pool values
E
Patch verifiedEPSS %1
4.2
CVE-2026-55086
Etherpad: Import/export use Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite
E
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-55089"