Read the docs

Patrowl

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Patrowl records in CISA KEV

No Patrowl vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Patrowlmanager 2 records HIGH

Records

4 records

TI-2021-19635 CVE-2021-43829

Unrestricted Upload of Files in Patrowl

Priority HIGH 72

PatrOwl is a free and open-source solution for orchestrating Security Operations.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.59246 Published 2021-12-14 Fixed in 1.7.7 CWE-434
TI-2026-62499 CVE-2026-92753 · GHSA-2r2q-5322-9f65

PatrowlManager through 1.8.4 Authorization Bypass via Events API

Priority MEDIUM 64

PatrowlManager through 1.8.4 contains an authorization bypass vulnerability in the events and alerts API endpoints that lack ownership filtering.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00377 Published 2026-09-16 No fix listed CWE-862
TI-2026-62500 CVE-2026-92754 · GHSA-qqjf-qhrx-83xx

PatrowlManager through 1.8.4 Improper Access Control via users API

Priority MEDIUM 57

PatrowlManager through 1.8.4 contains an improper access control vulnerability in the user listing API endpoint where the authorization decorator is commented out.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00342 Published 2026-09-16 No fix listed CWE-862
TI-2021-19634 CVE-2021-43828

Improper Privilege Management in Patrowl

Priority LOW 36

PatrOwl is a free and open-source solution for orchestrating Security Operations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01418 Published 2021-12-14 Fixed in 1.7.7 CWE-269
Open these records in search →