Critical RCE Vulnerability in Blocksy Companion Pro Affects Versions <= 2.1.46

## Overview A critical vulnerability, CVE-2026-57624, affects Blocksy Companion Pro versions 2.1.46 and earlier. This flaw allows unauthenticated remote code execution (RCE). Attackers can exploit this vulnerability without needing valid credentials. ## Technical Details The vulnerability exists due to improper input validation in the affected versions of Blocksy Companion Pro. An attacker can send crafted requests to the application, leading to the execution of arbitrary code on the server. The CVSS score for this vulnerability is 10.0, indicating its severity. This makes it a prime target for exploitation in the wild. ## Impact Successful exploitation of CVE-2026-57624 can lead to full server compromise. An attacker could gain control over the affected system, potentially accessing sensitive data or launching further attacks against connected systems. Organizations using vulnerable versions are at high risk, especially if they expose their services to the internet. ## Mitigation Defenders should update Blocksy Companion Pro to version 2.1.47 or later immediately. This version addresses the vulnerability and mitigates the risk of exploitation. Regularly check for updates and apply security patches promptly to reduce exposure to similar vulnerabilities in the future.