Prowler

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Prowler records in CISA KEV

No Prowler vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Prowler 1 record HIGH

Records

2 records

TI-2026-42317 CVE-2026-59151 · GHSA-h8m9-jgf8-vwvp

Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover

HIGH 74

Prowler is a cloud security platform.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00534 Published 2026-07-10 Fixed in 5.30.3 CWE-287

TI-2026-74167 CVE-2026-100169 · GHSA-5qw5-54v9-9g7q

Account pre-hijacking in Prowler API through unverified social login

LOW 37

Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not…

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00851 Published 2026-10-14 Fixed in 5.35.0 CWE-287

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0