Vendors / bastillion-io Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now bastillion-io records in CISA KEV No bastillion-io vulnerabilities are listed in CISA KEV.
Priority HIGH 81
Bastillion fails to properly validate request URI paths in its controller dispatcher, allowing unauthenticated attackers to bypass authentication filters by prefixing requests with arbitrary path segments.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00844 · Published 2026-08-18 · No fix listed CWE-288
Priority MEDIUM 56
A vulnerability was found in bastillion-io Bastillion up to 4.0.1.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.04513 · Published 2026-01-17 · No fix listed CWE-74
Priority MEDIUM 56
A vulnerability has been found in bastillion-io Bastillion up to 4.0.1.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.04513 · Published 2026-01-17 · No fix listed CWE-74
Open these records in search → All records by CVSS severity
1 0 2 0 0
