Vendors / Allegro Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 4
Exploited now Allegro records in CISA KEV No Allegro vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 57
Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenticated staff users to bypass rack model permissions because RalphPermission skips checks for views without a queryset.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00294 · Published 2026-10-16 · No fix listed CWE-862
Priority MEDIUM 43
Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0712 · Published 2000-10-13 · No fix listed
Priority LOW 38
A vulnerability was found in Allegro RomPager 4.01.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00243 · Published 2024-01-14 · No fix listed CWE-352
Priority LOW 37
Allegro WIndows 3.3.4152.0, embeds software administrator database credentials into its binary files, which allows users to access and modify data using the same credentials.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00766 · Published 2021-12-08 · No fix listed CWE-522
Priority LOW 34
An issue was discovered in Allegro Windows (formerly Popsy Windows) before 3.3.4156.1.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.003 · Published 2021-12-08 · No fix listed
Priority LOW 27
Allegro Tech BigFlow <1.6 is vulnerable to Missing SSL Certificate Validation.
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00434 · Published 2023-04-10 · Fixed in 1.6.0 CWE-295
Open these records in search → All records by CVSS severity
0 4 2 0 0
THREATIST.IORead the docs