Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Amidaware Clear all filters
TI-2026-84387 CVE-2026-121578 · GHSA-m795-4pj8-4r7f

Stored cross-site scripting in Tactical RMM

Priority MEDIUM 60

Tactical RMM contains a stored XSS vulnerability caused by improperly validated input or encode output for various fields, enabling HTML/JavaScript to be stored in the tools database, which is then executed in the browse…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00312 Published 2026-11-03 No fix listed CWE-79
TI-2025-42874 CVE-2025-69516 · GHSA-8g9w-79w6-cw84

A Server-Side Template Injection (SSTI) vulnerability in the…

Priority MEDIUM 44

A Server-Side Template Injection (SSTI) vulnerability in the /reporting/templates/preview/ endpoint of Amidaware Tactical RMM, affecting versions equal to or earlier than v1.3.1, allows low-privileged users with Report V…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02281 Published 2026-01-29 No fix listed CWE-1336