CVE-2026-73626
JupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManager
CVSS score
7.7
EPSS probability
%0.4
Risk score
0.0
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.8
CVE-2026-42266
JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request.
J
Patch verifiedEPSS %1
8.6
CVE-2026-73417
JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)
J
Patch verifiedEPSS %1
8.6
CVE-2026-42557
jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content
J
Patch status unknownEPSS %1
7.5
CVE-2026-73415
jupyterlab: Image viewer in JupyterLab allows XSS when opening malicious image in new browser tab
J
Patch verifiedEPSS %1
6.1
CVE-2026-73416
jupyterlab: PyPI extension blocklist package-name canonicalization bypass
J
Patch verifiedEPSS %1
6.0
CVE-2026-73627
JupyterLab 4.6.0 Plugin Manager Lock-Rule Enforcement Bypass
J
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-73626"