Backstage

    Dashboard / Vendors

    Products: 28
    Vulnerabilities: 60
    Known Exploited: 0
    1
    Critical Level Threats
    20
    High Level Threats
    32
    Medium Level Threats
    7
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Items Per Page

    Vulnerabilities

    CVE-2026-115923

    Backstage catalog rules can be bypassed for URL locations using encoded path segments

    Last Modified: Nov 02, 2026
    Published: Oct 26, 2026

    CVE-2026-106495

    Backstage: Improper access control in backend action invocation

    Last Modified: Oct 13, 2026
    Published: Oct 12, 2026

    CVE-2026-106557

    Backstage: Improper input validation in TechDocs Markdown extension configuration

    Last Modified: Oct 09, 2026
    Published: Oct 07, 2026

    CVE-2026-106563

    Backstage: Improper entity validation in deprecated Kubernetes services endpoint

    Last Modified: Oct 16, 2026
    Published: Oct 07, 2026

    CVE-2026-106562

    Backstage: Incorrect authorization in search engine permission filtering

    Last Modified: Oct 16, 2026
    Published: Oct 07, 2026
    Items Per Page