FA
Vendor
factionsecurity
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-44668 | FA faction factionsecurity | 9.8 | May 26 | Faction: Unauthenticated Read, Modify, and Delete of Boilerplate Templates |
| CVE-2026-44669 | FA faction factionsecurity | 8.7 | May 26 | Faction: Stored XSS in Assessment Attachment Filename Preview Rendering |
| CVE-2026-44667 | FA faction factionsecurity | 8.7 | May 26 | Faction: Stored XSS in Remediation Verification Attachment Filename Preview Rendering |
| CVE-2025-66022 | FA faction factionsecurity | 9.8 | Nov 26 | FACTION Unauthenticated Custom Extension Upload leads to RCE |
| CVE-2025-27422 | FA faction factionsecurity | 7.5 | Mar 3 | FACTION Allows Authentication Bypass via User Creation |