TI-2026-26021 CVE-2026-33640
Outline has a rate limit bypass that allows brute force of email login OTP
Priority HIGH 80
Outline is a service that allows for collaborative documentation.
outline
Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9
Exploited now
outline records in CISA KEVNo outline vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
15 records in Outline · all components
TI-2026-20086 CVE-2026-24901
Outline's IDOR allows unauthorized viewing and seizing of private deleted drafts
Priority HIGH 73
Outline is a service that allows for collaborative documentation.
TI-2024-25167 CVE-2024-37829 · GHSA-9h5p-5xh6-wxx9
An issue in Outline <= v0.76.1 allows attackers to execute a session hijacking attack via…
Priority HIGH 73
An issue in Outline <= v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link.
TI-2026-30168 CVE-2026-41649
Outline has IDOR in document share creation that allows unauthorized access to private documents across workspaces
Priority HIGH 67
Outline is a service that allows for collaborative documentation.
Priority HIGH 67
Outline is an open source, collaborative document editor.
TI-2026-32586 CVE-2026-44695
Outline: Slack OAuth state can link a victim Outline account to an attacker Slack identity
Priority MEDIUM 62
Outline is a service that allows for collaborative documentation.
TI-2024-25168 CVE-2024-37830 · GHSA-3vm9-v98f-4rrp
An issue in Outline <= v0.76.1 allows attackers to redirect a victim user to a malicious…
Priority MEDIUM 60
An issue in Outline <= v0.76.1 allows attackers to redirect a victim user to a malicious site via intercepting and changing the state cookie.
TI-2023-03296 CVE-2023-3532 · GHSA-xrj4-gqr5-5gq8
Cross-site Scripting (XSS) - Stored in outline/outline
Priority MEDIUM 58
Cross-site Scripting (XSS) - Stored in GitHub repository outline/outline prior to 0.70.1.
TI-2026-22768 CVE-2026-28506
Outline's Information Disclosure in Activity Logs allows User Enumeration of Private Drafts
Priority MEDIUM 53
Outline is a service that allows for collaborative documentation.
TI-2023-30605 CVE-2023-54331 · GHSA-368x-rx64-j3wc
Outline 1.6.0 - Unquoted Service Path
Priority LOW 38
Outline 1.6.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges.
TI-2025-42156 CVE-2025-68663
Outline has a suspended user authentication bypass via WebSocket connections
Priority LOW 36
Outline is a service that allows for collaborative documentation.
TI-2025-39879 CVE-2025-64487
Outline is vulnerable to privilege escalation vulnerability in document sharing
Priority LOW 33
Outline is a service that allows for collaborative documentation.
Priority LOW 30
Outline is a service that allows for collaborative documentation.
TI-2022-02163 CVE-2022-2342 · GHSA-qc42-vfh6-3wcf
Cross-site Scripting (XSS) - Stored in outline/outline
Priority LOW 26
Cross-site Scripting (XSS) - Stored in GitHub repository outline/outline prior to v0.64.4.
TI-2026-20246 CVE-2026-25062
Outline Affected an Arbitrary File Read via Path Traversal in JSON Import
Priority LOW 25
Outline is a service that allows for collaborative documentation.