Read the docs

Amidaware

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Amidaware records in CISA KEV

No Amidaware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tactical Rmm 1 record MEDIUM

Records

2 records

TI-2026-84387 CVE-2026-121578 · GHSA-m795-4pj8-4r7f

Stored cross-site scripting in Tactical RMM

Priority MEDIUM 60

Tactical RMM contains a stored XSS vulnerability caused by improperly validated input or encode output for various fields, enabling HTML/JavaScript to be stored in the tools database, which is then executed in the browse…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00312 Published 2026-11-03 No fix listed CWE-79
TI-2025-42874 CVE-2025-69516 · GHSA-8g9w-79w6-cw84

A Server-Side Template Injection (SSTI) vulnerability in the…

Priority MEDIUM 44

A Server-Side Template Injection (SSTI) vulnerability in the /reporting/templates/preview/ endpoint of Amidaware Tactical RMM, affecting versions equal to or earlier than v1.3.1, allows low-privileged users with Report V…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02281 Published 2026-01-29 No fix listed CWE-1336
Open these records in search →