Products: 1
Vulnerabilities: 7
Known Exploited: 0
0
Critical Level Threats
1
High Level Threats
3
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-77426
Unleash: Missing await on permission check + cross-project IDOR in admin API
Last Modified: Sep 23, 2026
Published: Sep 22, 2026
CVE-2026-77425
Unleash: A project member can reorder activation strategies belonging to any other project / environment (cross-project integrity write), bypassing project RBAC and the audit log
Last Modified: Sep 23, 2026
Published: Sep 22, 2026
CVE-2026-76910
Unleash: Clone-feature lets a user copy a feature from a project they cannot read
Last Modified: Sep 23, 2026
Published: Sep 22, 2026
CVE-2026-76909
Unleash: CR-approval email renders user-controlled raw HTML
Last Modified: Sep 23, 2026
Published: Sep 22, 2026
CVE-2026-63466
Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username
Last Modified: Aug 21, 2026
Published: Aug 21, 2026
Items Per Page
