evolution-foundation

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

evolution-foundation records in CISA KEV

No evolution-foundation vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-62127 CVE-2026-91997 · GHSA-755x-c9g7-3hr7

evolution-api through 2.3.7 Prometheus Metrics IP Allowlist Bypass

HIGH 70

evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, allowing unauthenticated access to the /metrics endpoint.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0045 Published 2026-09-15 No fix listed CWE-697

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0