VulnSocial

CVE-2026-67208Disclosure

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to the exposed H2 database web console using default shipped credentials. Attackers can access the unprotected /h2-console endpoint, authenticate with default credentials, and leverage the H2 CREATE ALIAS Runtime.exec() technique to execute arbitrary commands, resulting in root-level code execution when running the stock Docker image.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-306CWE-1188

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 4 signals
  • Disclosure: 4 classified signals
  • Peaked 2d ago at 2 mentions (2026-07-30); latest day: 1
  • 4 total mentions across 3 days

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-07-30: 2Mentions · 2026-07-31: 1Mentions · 2026-08-13: 1Patch / Workaround · 2026-07-31: 1Technical Details · 2026-07-30: 2Technical Details · 2026-07-31: 1Technical Details · 2026-08-13: 107-3007-3108-13
Signal classification1 categories
Disclosure
4100.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-07-302
Disclosure2
2026-07-311
Disclosure1
2026-08-131
Disclosure1
Full discourse4 posts
  • pdnuclei-bot@pdnuclei_bot
    Disclosure

    🚨 CVE-2026-67208 - critical 🚨 Juggle <= 1.6.0 - Unauthenticated Exposed H2 Database Console > Juggle ships the H2 database web console enabled and reachable from non-localhost by ... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-67208 @pdnuclei #NucleiTemplates #cve

    Post summary

    CVE-2026-67208 in Juggle versions ≤1.6.0 exposes an unauthenticated H2 database web console accessible from non‑localhost, making it a critical disclosure with no reported exploits, PoC, or patches.

    060195909
    1.3K followersView on X
  • Security Arsenal, LLC@SecurityAr58409
    Disclosure

    🔒 #CyberSecurity CVE-2026-67208: Critical Docker Remote Code Execution Vulnerability — Detection… "This week, the National Vulnerability Database (NVD) published CVE-2026-67208, a critical…" 🔗 https://securityarsenal.com/blog/cve-2026-67208-critical-docker-remote-code-execution-vulnerability-detection-and-remediation-guide #CyberSecurity #ThreatIntel #cve202667208 #critical #cve

    Post summary

    The tweet announces the NVD publication of CVE-2026-67208, highlighting its critical RCE nature in Docker and pointing to a remediation guide, with no evidence of active exploitation or PoC.

    0001091
    20 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-67208 Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to the… https://www.cve.org/CVERecord?id=CVE-2026-67208 ----- Traducción: CVE-2026-67208 Jug… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-67208 as a remote code execution vulnerability in Juggle 1.6.0, describing its basic impact but providing no PoC, exploit code, patch, or evidence of active exploitation.

    0000036
    96 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-67208 Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to the… https://www.cve.org/CVERecord?id=CVE-2026-67208

    Post summary

    The text announces CVE‑2026‑67208, a remote code execution flaw in Juggle through 1.6.0 that permits unauthenticated attackers to execute arbitrary OS commands.

    00000987
    57.9K followersView on X

Explore more

Back to dashboard