Skip to content
OpenAdvisories

Vendor

trycua

1 known vulnerabilities.

Products

cua-computer-server 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-86121

    Cua computer-server before 0.3.42 Unauthenticated RCE via Desktop Control

    Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME environment variable is unset and bind to all interfaces by default, allowing unauthenticated attackers to execute arbitrary commands. Attackers can reach TCP port 8000 to …

    trycua cua-computer-server