Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Deloitte Clear all filters
TI-2026-41395 CVE-2026-57476 · GHSA-85qw-gwgm-xj6w

Deloitte AI Assist for Customer unauthenticated RAG corpus read and write

Priority LOW 28

Deloitte AI Assist for Customer exposed unauthenticated API endpoints that allowed an attacker with knowledge of additional parameters to read from or inject content into the retrieval-augmented generation (RAG) corpus.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00436 Published 2026-07-10 Fixed in 2026-03-25 CWE-306
TI-2026-41394 CVE-2026-57475 · GHSA-23xg-h5j2-8fcf

Deloitte AI Assist for Customer unauthenticated configuration write

Priority LOW 31

Deloitte AI Assist for Customer accepted unauthenticated POST requests through public-facing API endpoints that allowed a remote attacker to make limited additions to the configuration.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00598 Published 2026-07-10 Fixed in 2026-03-25 CWE-306
TI-2026-41393 CVE-2026-57474 · GHSA-fphv-wg9q-66c2

Deloitte AI Assist for Customer information disclosure

Priority LOW 37

Deloitte AI Assist for Customer disclosed some configuration information through public-facing API endpoints that accepted unauthenticated requests.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00514 Published 2026-07-10 Fixed in 2026-03-25 CWE-200