browserstack
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| browserstack-runner | 2 | – | Jun 2, 2026 |
| browserstack-cypress-cli | 1 | – | Jun 15, 2026 |
Exploited and recent CVEs
- CVE-2026-48723 BrowserStack Cypress CL: Command Injection via cypress_config_file leads to arbitrary code execution through malicious browserstack.json 0.5%
- CVE-2026-49144 BrowserStack Runner 0.9.5 Path Traversal via _default HTTP Handler 0.4%
- CVE-2026-49143 BrowserStack Runner 0.9.5 Unauthenticated RCE via /_log HTTP Handler 0.8%