TI-2026-27685 CVE-2026-35582 · GHSA-3p24-9x7v-7789
Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix
Priority HIGH 73
Emissary is a P2P based data-driven workflow engine.
NationalSecurityAgency
Records54All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high19CVSS 7.0–8.9
Exploited now
NationalSecurityAgency records in CISA KEVNo NationalSecurityAgency vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
13 records in Emissary · all components
Priority MEDIUM 45
Emissary is a P2P based data-driven workflow engine.
Priority MEDIUM 45
Emissary is a P2P-based, data-driven workflow engine.
TI-2026-27683 CVE-2026-35580 · GHSA-3g6g-gq4r-xjm9
Emissary has GitHub Actions Shell Injection via Workflow Inputs
Priority MEDIUM 42
Emissary is a P2P based data-driven workflow engine.
TI-2021-12047 CVE-2021-32094 · GHSA-4c4c-c4fg-2wpp
U.S.
Priority MEDIUM 40
U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to upload arbitrary files.
TI-2021-12049 CVE-2021-32096 · GHSA-8pp7-v75p-mx4p
The ConsoleAction component of U.S.
Priority LOW 39
The ConsoleAction component of U.S.
TI-2021-12048 CVE-2021-32095 · GHSA-9894-h296-27h4
U.S.
Priority LOW 37
U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to delete arbitrary files.
TI-2026-27684 CVE-2026-35581 · GHSA-6c37-7w4p-jg9v
Emissary has a Command Injection via PLACE_NAME Configuration in Executrix
Priority LOW 34
Emissary is a P2P based data-driven workflow engine.
TI-2021-12303 CVE-2021-32634
Deserialization of Untrusted Data in Emissary
Priority LOW 34
Emissary is a distributed, peer-to-peer, data-driven workflow framework.
TI-2021-12046 CVE-2021-32093 · GHSA-fqvq-c37v-p4xx
The ConfigFileAction component of U.S.
Priority LOW 31
The ConfigFileAction component of U.S.
TI-2026-27686 CVE-2026-35583 · GHSA-hxf2-gm22-7vcm
Emissary has a Path Traversal via Blacklist Bypass in Configuration API
Priority LOW 30
Emissary is a P2P based data-driven workflow engine.
TI-2021-12045 CVE-2021-32092 · GHSA-c8p5-2vx8-4c5h
A Cross-site scripting (XSS) vulnerability in the DocumentAction component of U.S.
Priority LOW 29
A Cross-site scripting (XSS) vulnerability in the DocumentAction component of U.S.
TI-2026-27675 CVE-2026-35571 · GHSA-cpm7-cfpx-3hvp
Emissary has Stored XSS via Navigation Template Link Injection
Priority LOW 21
Emissary is a P2P based data-driven workflow engine.