Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Patrowl Clear all filters
TI-2026-62500 CVE-2026-92754 · GHSA-qqjf-qhrx-83xx

PatrowlManager through 1.8.4 Improper Access Control via users API

Priority MEDIUM 57

PatrowlManager through 1.8.4 contains an improper access control vulnerability in the user listing API endpoint where the authorization decorator is commented out.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00342 Published 2026-09-16 No fix listed CWE-862
TI-2026-62499 CVE-2026-92753 · GHSA-2r2q-5322-9f65

PatrowlManager through 1.8.4 Authorization Bypass via Events API

Priority MEDIUM 64

PatrowlManager through 1.8.4 contains an authorization bypass vulnerability in the events and alerts API endpoints that lack ownership filtering.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00377 Published 2026-09-16 No fix listed CWE-862
TI-2021-19635 CVE-2021-43829

Unrestricted Upload of Files in Patrowl

Priority HIGH 72

PatrOwl is a free and open-source solution for orchestrating Security Operations.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.59246 Published 2021-12-14 Fixed in 1.7.7 CWE-434
TI-2021-19634 CVE-2021-43828

Improper Privilege Management in Patrowl

Priority LOW 36

PatrOwl is a free and open-source solution for orchestrating Security Operations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01418 Published 2021-12-14 Fixed in 1.7.7 CWE-269