CVE-2024-39208: Luciapplucky Luci-App-Lucky

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

luci-app-lucky v2.8.3 was discovered to contain hardcoded credentials.

Affected products

• Luciapplucky Luci-App-Lucky: up to and including 2.8.3

Published 2024-06-27. Last modified 2026-06-17.