Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: semaphoreui Clear all filters
TI-2026-76499 CVE-2026-112305 · GHSA-6cr7-7xqc-c37c

Remote code execution in Semaphore UI via Ansible variable override

Priority MEDIUM 40

Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the task_runner role to override protected Ansible variables by supplying arbitrary keys in the task environment JSON.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00563 Published 2026-10-19 No fix listed CWE-915
TI-2026-51419 CVE-2026-73294 · GHSA-xp7j-h7jc-4w8p

Semaphore U: OS Command Injection

Priority HIGH 76

Semaphore UI is a web interface for managing DevOps tools.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0065 Published 2026-08-12 Fixed in 2.18.17, 2.19.5-beta2 +1 CWE-78