Read the docs

Fullstep

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Fullstep records in CISA KEV

No Fullstep vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-05040 CVE-2026-5749 · GHSA-c4hv-pjjq-493x

Inadequate access control vulnerability in Fullstep

Priority MEDIUM 43

Inadequate access control in the registration process in Fullstep V5, which could allow unauthenticated users to obtain a valid JWT token with which to interact with authenticated API resources.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0027 Published 2026-04-22 Fixed in 5.30.07 CWE-306
TI-2026-05041 CVE-2026-5750 · GHSA-27hq-xp89-25mq

Insecure direct object reference (IDOR) vulnerability in Fullstep

Priority LOW 35

An insecure direct object reference (IDOR) vulnerability in the Fullstep V5 registration process allows authenticated users to access data belonging to other registered users through various vulnerable authenticated reso…

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00207 Published 2026-04-22 Fixed in 5.30.07 CWE-639
Open these records in search →