Dayforce

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Dayforce records in CISA KEV

No Dayforce vulnerabilities are listed in CISA KEV.

3 records

TI-2026-51724 CVE-2026-73640 · GHSA-wrm6-gm2g-4hgx

MEDIUM 48

Dayforce ESS Excelity is vulnerable to Time Based-Blind SQL Injection in password recovery functionality.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00289 Published 2026-09-28 Fixed in V3 CWE-89

TI-2026-51726 CVE-2026-73642 · GHSA-p8m3-fq83-fgm7

MEDIUM 46

Dayforce ESS Excelity is vulnerable to Path Traversal in file download functionality.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00424 Published 2026-09-28 Fixed in V4 CWE-22

TI-2026-51725 CVE-2026-73641 · GHSA-9rqp-h52c-rgx9

LOW 23

Dayforce ESS Excelity is vulnerable to Reflected XSS in multiple endpoints.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00327 Published 2026-09-28 Fixed in V4 CWE-79