SpecterOps

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

SpecterOps records in CISA KEV

No SpecterOps vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-42395 CVE-2026-59255 · GHSA-7qmq-x64g-8v7j

BloodHound Missing Authorization on Custom Node Management API

MEDIUM 64

BloodHound through 9.4.0, fixed in commit 8f79035, contains a missing authorization vulnerability in the custom-nodes API endpoints that allows any authenticated user to modify the global graph schema.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00439 Published 2026-07-15 Fixed CWE-862

TI-2026-58561 CVE-2026-85241 · GHSA-x4wv-m72p-pcf5

SpecterOps BloodHound Graph Write Endpoint v2.go NewV2API improper authorization

LOW 24

A weakness has been identified in SpecterOps BloodHound up to 9.5.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-09-03 Fixed in 9.6.0-rc1, 9.6.0 +1 CWE-266

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0