safing

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

safing records in CISA KEV

No safing vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-75450 CVE-2026-111664 · GHSA-6952-c35h-6rff

Missing authorization in Safing Portmaster lets local processes force downgrades

LOW 21

Safing Portmaster before 2.2.5 contains a missing authorization vulnerability that allows unprivileged local processes to force updates by calling the POST /api/v1/updates/from-url endpoint registered with api.PermitAnyo…

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00116 Published 2026-10-16 Fixed in 2.2.5 CWE-306

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0