MAXHUB

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

MAXHUB records in CISA KEV

No MAXHUB vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-05627 CVE-2026-6411 · GHSA-m8jc-jjj9-hgc8

MAXHUB Pivot Client Application Use of a Broken or Risky Cryptographic Algorithm

LOW 37

This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow an attacker to obtain encrypted tenant email addresses and related metadata from any tenant.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00159 Published 2026-05-07 Fixed in 1.36.2 CWE-327

TI-2025-33617 CVE-2025-53704 · GHSA-mqjc-wg38-cgvf

MAXHUB Pivot Weak Password Recovery Mechanism for Forgotten Password

LOW 37

The password reset mechanism for the Pivot client application is weak, and it may allow an attacker to take over the account.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00315 Published 2025-12-04 Fixed in 1.36.2 CWE-640

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0