CERT.PL

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

CERT.PL records in CISA KEV

No CERT.PL vulnerabilities are listed in CISA KEV.

2 records

TI-2026-47385 CVE-2026-66723

LOW 32

MWDB Core versions >=2.2.0 and <2.19.0 contain a missing authorization vulnerability in the Remote Instances proxy API.

CVSS 4.0HIGH 7.0 Network No auth No interaction EPSS 0.00835 Published 2026-07-29 Fixed in 2.19.0 CWE-862

TI-2026-47386 CVE-2026-66724

LOW 24

MWDB Core versions >=2.0.0 and <2.19.0 contain a missing authorization vulnerability in the deprecated config and blob upload endpoints.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00439 Published 2026-07-29 Fixed in 2.19.0 CWE-862