CVE-2026-25887

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.1, there is a remote code execution vulnerability via the MongoDB dataset Query. This issue has been patched in version 4.8.1.

CVSS v3.1

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.84% chance of exploitation in the next 30 days, 55th percentile

Published

2026-03-06

Vulhub environments (1)

• vulhub/vulhub/tree/master/chartbrew/CVE-2026-25887

References

• CVE Record
• NVD entry

Related

• CVE-2026-25882
• CVE-2026-25889
• CVE-2026-25881
• CVE-2026-25890
• CVE-2026-25879
• CVE-2026-25892