bookstackapp bookstack

3 known vulnerabilities in bookstackapp bookstack, 2 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-89022 CVSS 9.1 critical BookStack before 26.05.5 contains an authentication bypass vulnerability in its social login implementation that allows unauthenticated…
CVE-2026-84695 CVSS 9.3 critical BookStack before 26.05.4 contains a stored cross-site scripting vulnerability in the drawing upload endpoint that accepts unvalidated…
CVE-2026-82450 CVSS 8.7 high BookStack before 26.05.4 contains a remote code execution vulnerability in the portable ZIP import functionality that allows users with…