VULNERABILITY INTELLIGENCE

CVE-2026-54162

CVSS score4.7 MEDIUM

EPSS probability0.77%

CISA KEVNot currently listed

Published2026-10-28

Last modified2026-10-29

Description

Ember is a real-time terminal dashboard for Caddy servers with FrankenPHP support. Prior to 1.4.2, interactive TUI row formatters pass Caddy access-log fields, particularly the request URI, through the `fitCellLeft` render helper without neutralizing terminal escape or control sequences. An unauthen…