CVE-2026-20976
High · 7.8CVSS
7.8
EPSS
0.2%
Published
Jan 9, 2026
CISA due date
—
The record
Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|