CVE-2026-91843

Critical9.8Published on September 16, 2026

A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.

CVSS score9.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-121

Gyazo Server Intrusion Puts Account Data and Private Image Links at Risk

Gyazo confirmed a critical upload-server flaw exposed 23.62M user records and 490M image metadata, risking private links, sessions and passwords.

This product uses the NVD API but is not endorsed or certified by the NVD.