TI-2026-51398 CVE-2026-73264Prowler: Server-Side Request Forgery (SSRF) in Lighthouse ProviderPriority HIGH 66Prowler is a cloud security platform.CVSS 3.1HIGH 7.6· Network · High privileges · No interaction · EPSS 0.00435 · Published 2026-08-12 · Fixed in 5.33.1 CWE-918
TI-2026-51397 CVE-2026-73263Prowler: RCE on Prowler App workers via kubeconfig auth-provider cmd-pathPriority MEDIUM 44Prowler is a cloud security platform.CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.0065 · Published 2026-08-12 · Fixed in 5.36.0 CWE-78
TI-2026-51396 CVE-2026-73262 · GHSA-c2jg-2778-ggm4Prowler: Stored XSS in HTML reports through unescaped cloud resource tagsPriority LOW 24Prowler is a cloud security platform.CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00298 · Published 2026-08-12 · Fixed in 5.37.0 CWE-79