CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

CVE-2026-39987: Pre-Auth RCE in Marimo Notebooks

April 23, 2026

CVE-2026-39987 is a pre-authentication remote code execution vulnerability in Marimo notebooks before version 0.23.0. It was added to CISA's Known Exploited Vulnerabilities catalog in April 2026 after being exploited within hours of disclosure.