Read the docs

Rill Data

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Rill Data records in CISA KEV

No Rill Data vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-70697 CVE-2026-108718 · GHSA-r44j-vvw7-323g

Missing authorization in Rill OAuth server issues tokens

Priority LOW 39

Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization codes to dynamically registered clients without user consent.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00271 Published 2026-10-11 No fix listed CWE-862
Open these records in search →