ufirstgroup

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

ufirstgroup records in CISA KEV

No ufirstgroup vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-46785 CVE-2026-65636

YAML injection via unescaped newlines in ymlr document comments

MEDIUM 44

Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr (Elixir.Ymlr module) allows attackers to inject arbitrary content into generated YAML documents through document comments.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00197 Published 2026-07-31 Fixed in 5.1.6 CWE-93

Open these records in search →

Critical	0
High	0
Medium	0
Low	1
No CVSS	0