High
CVE-2026-73652
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 22
Reset filters
Medium
CVE-2026-54533
vantage6 node has an Improper Access Control issue
Medium
CVE-2026-54445
Vantage6: Set admin user and password from environment or configuration
Low
CVE-2024-24769
Vantage6: No limit on emails sent for password/MFA reset
Medium
CVE-2024-27928
Vantage6: 2FA can be circumvented with hacked email access
Low
CVE-2024-32969
vantage6 collaboration admins can extend their influence by expanding the collaboration
Medium
CVE-2024-24770
vantage6 vulnerable to a username timing attack on recover password/MFA token
Low
CVE-2025-43863
vantage6 lacks brute-force protection on change password functionality
Low
CVE-2025-43866
Vantage6 Server JWT secret not cryptographically secure
Medium
CVE-2024-23823
vantage6's CORS settings overly permissive
Low
CVE-2024-21671
vantage6 vulnerable to username timing attack
Medium
CVE-2024-21653
vantage6 has insecure SSH configuration for node and server containers
High
CVE-2024-21649
vantage6 remote code execution vulnerability
Low
CVE-2024-22193
vantage6 may create unencrypted tasks in encrypted collaboration
High
CVE-2023-47631
vantage6-server node accepts non-whitelisted algorithms from malicious server
Medium
CVE-2023-28635
Defining resource name as integer may give unintended access in vantage6
Medium
CVE-2023-41882
Improper Access Control in vantage6
Low
CVE-2023-41881
vantage6 does not properly delete linked resources when deleting a collaboration
High
CVE-2023-23930
Pickle serialization vulnerable to Deserialization of Untrusted Data
High
CVE-2023-23929
vantage6 refresh tokens do not expire
High
CVE-2023-22738
vantage6 vulnerable to Improper Preservation of Permissions
Medium
CVE-2022-39228
vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. vantage6 does not inform the user of wrong username/password combination if the username actually exists
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.