Login Request a demo
IN
Product
Indico
by CERN · last CVE Mar 23, 2026
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 0High 3Medium 8Low 0
Severity
All severities11Critical0High3Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Indico to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33046
8.8
1%
Mar 23
Indico discloses local files resulting in Remote Code Execution through LaTeX injection
Affected: before 3.3.12
CVE-2024-50633
7.5
1%
Jan 16
A Broken Object Level Authorization (BOLA) vulnerability in Indico through 3.3.5 allows attackers to read information by sending a crafted POST request to the component…
Affected: 2.2 through 3.3.5
CVE-2021-30185
7.5
1%
Apr 7
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link
Affected: before 2.3.4
Showing 3