Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Cr*nMaster (cronmaster) is a Cronjob management UI with human readable syntax, live logging and log history for cronjobs. Prior to version 2.2.0, an authentication bypass in middleware allows unauthenticated requests with an invalid session cookie to be treated as authenticated when the middleware’s session-validation fetch fails. This can result in unauthorized access to protected pages and unauthorized execution of privileged Next.js Server Actions. This issue has been patched in version 2.2.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-02 | 1 | Disclosure1 |
| 2026-06-02 | 1 | General1 |
🔴 CrnMaster, Authentication Bypass, #CVE-2026-34072 (Critical) -DC-Jun2026-134 https://dailycve.com/crnmaster-authentication-bypass-cve-2026-34072-critical-dc-jun2026-134/
Post summary
The note merely announces a CVE 2026-34072 as an authentication bypass with critical severity, lacking further detail or actionable insights.
🟠 CVE-2026-34072 - High Cr*nMaster (cronmaster) is a Cronjob management UI with human readable syntax, live logging and log history for cronjobs. Prior to version 2.2.0, an authentication bypass in middleware allows... https://www.thehackerwire.com/vulnerability/CVE-2026-34072/ https://t.co/NdaklLlMcM
Post summary
A newly disclosed CVE-2026-34072 in Cr*nMaster allows an authentication bypass in middleware (prior to v2.2.0). No PoC, exploit, or patch is referenced in the tweet beyond a link to a vulnerability report.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | fccview | cronmaster | - | - | - |