Critical Vulnerability in Countly Server: CVE-2026-44977
A critical vulnerability (CVE-2026-44977, CVSS score of 9) exists in Countly Server, a product analytics solution. This vulnerability allows a non-global application administrator to upload attacker-controlled active content, which can be executed by a global administrator, exposing authenticated session capabilities. The issue is fixed in versions 24.05.50 and 25.03.44. Organizations using affected versions must upgrade immediately to prevent potential exploitation.