Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Posit Software, PBC Clear all filters
TI-2026-85967 CVE-2026-121880 · GHSA-45mx-vf84-77ww

Authorization bypass in RStudio Server and Posit Workbench port proxy

Priority LOW 21

Authorization bypass through user-controlled key in the localhost port-proxy (/p/<token>/) in Posit Software, PBC RStudio Server and Posit Workbench before 2026.08.0 allows remote authenticated users to reach web applica…

CVSS 4.0MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00252 Published 2026-11-06 Fixed in 2026.08.0 CWE-639
TI-2026-85968 CVE-2026-121881 · GHSA-9mg6-47p6-97j7

SQL injection in Posit Workbench code-server session-state RPC

Priority LOW 25

SQL injection vulnerability in the get_last_seen code-server session-state RPC in Posit Software, PBC Posit Workbench before 2026.08.0 allows authenticated users to read arbitrary data from the Workbench database via the…

CVSS 4.0MEDIUM 5.7 Network Low privileges No interaction EPSS 0.00265 Published 2026-11-06 Fixed in 2026.08.0 CWE-89