GH
Product
ghidra
by nationalsecurityagency · last CVE Oct 24, 2026
27
CVEs
0
On KEV
8.8
Max CVSS
8
New 30D
Severity mix
Critical 0High 8Medium 17Low 2
Watch

Add ghidra to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-52758
8.8
0%
Jun 10
Ghidra < 12.1 - SQL Injection via Unescaped Filter Values in BSim Search
Affected: 11.0 before 12.1
CVE-2026-52754
8.8
0%
Jun 10
Ghidra < 12.1 - Authentication Bypass via Null Signature in PKIAuthenticationModule
Affected: before 12.1
CVE-2026-52751
8.8
1%
Jun 10
Ghidra < 12.1 - Remote Code Execution via Unfiltered RMI Deserialization in Shared Project Connection
Affected: before 12.1
CVE-2026-49498
8.8
0%
Jun 10
Ghidra 11.0 < 12.1 - SQL Injection in PostgreSQL Password Change via Unescaped Username
Affected: 11.0 before 12.1
CVE-2026-52755
7.8
0%
Jun 10
Ghidra < 12.0.4 - Path Traversal via Zip Slip in Theme Import
Affected: before 12.0.4
CVE-2026-52752
7.8
0%
Jun 10
Ghidra < 12.0.2 - Path Traversal in Extension Installer via ZIP Entry Names
Affected: before 12.0.2
CVE-2026-52750
7.8
1%
Jun 10
Ghidra < 12.1- Command Injection via URL Annotation Click
Affected: before 12.1
CVE-2026-100504
7.0
0%
Sep 26
Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128
Affected: through 12.1.4
Showing 8