Phase

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Phase records in CISA KEV

No Phase vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-73427 CVE-2026-110210 · GHSA-mw5f-8wgh-2m29

Missing authorization in Phase Console exposes secret history

MEDIUM 60

Phase Console through 2.77.3 contains a missing authorization vulnerability that allows organisation members without Secrets read permission to read secret history via the secretHistory GraphQL query.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00496 Published 2026-10-13 No fix listed CWE-862

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0