Vulnerability
CVE-2026-39987 — Marimo Remote Code Execution Vulnerability
Exploited in the wild 1 story · 1 outlet
Impacted if
Marimo Marimo
CISA Known Exploited Vulnerabilities
Added on 2026-04-23, federal remediation due 2026-05-07. Marimo contains an pre-authorization remote code execution vulnerability, allowing an unauthenticated attacked to shell access and execute arbitrary system commands.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
First seen by AX-NEWS · latest story . Severity: NVD, or the CVE record while the NVD has not scored it. This product uses data from the NVD API but is not endorsed or certified by the NVD.
Coverage
-
September 2026 CVE Landscape
Recorded Future
Cybersecurity
In September 2026, Insikt Group® identified 94 high-impact vulnerabilities to prioritize for remediation , 59 of which had a Very Critical Recorded Future Risk Score. This represents a 29% increase from last month. 43 of these…