Vendors / CyberTutor Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now CyberTutor records in CISA KEV No CyberTutor vulnerabilities are listed in CISA KEV.
Priority MEDIUM 49
New Site Server developed by CyberTutor has a Use of Client-Side Authentication vulnerability, allowing unauthenticated remote attackers to modify the frontend code to gain administrator privileges on the website.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00551 · Published 2025-11-10 · No fix listed CWE-603
Priority LOW 37
NewSiteServer (NSS) developed by CyberTutor has a Missing Authentication vulnerability.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00473 · Published 2026-08-24 · No fix listed CWE-306
Priority LOW 23
NewSiteServer (NSS) developed by CyberTutor has an Arbitrary File Upload vulnerability.
CVSS 4.0 MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00327 · Published 2026-08-24 · No fix listed CWE-434
Open these records in search → All records by CVSS severity
Critical1 High0 Medium2 Low0 No CVSS0