Products: 2
Vulnerabilities: 8
Known Exploited: 0
0
Critical Level Threats
2
High Level Threats
6
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-58272
Sync-in Server has Username/Login Enumeration via Timing Side-Channel on POST /api/auth/login (incomplete fix of the prior timing-attack advisory)
Last Modified: Sep 23, 2026
Published: Sep 21, 2026
CVE-2026-58270
Sync-in Server has a ReDoS via Unsanitized Regex in Sync Diff `pathFilters`
Last Modified: Sep 22, 2026
Published: Sep 21, 2026
CVE-2026-58269
Sync-in Server has a complete 2FA Bypass via `POST /api/auth/token`
Last Modified: Sep 24, 2026
Published: Sep 21, 2026
CVE-2026-58271
@sync-in/server vulnerable to TOTP Brute-Force via `POST /api/app/sync/register`
Last Modified: Sep 24, 2026
Published: Sep 21, 2026
CVE-2026-47684
Sync-in Server: SSRF protection bypass via IPv4-mapped IPv6 addresses in regExpPrivateIP
Last Modified: Jun 16, 2026
Published: Jun 16, 2026
Items Per Page
