RU
Vendor
rucio
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-29090 | RU rucio rucio | 8.8 | May 6 | Rucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata database |
| CVE-2026-29080 | RU rucio rucio | 8.8 | May 6 | Rucio SQL Injection in FilterEngine Oracle JSON Path via DID Search API |
| CVE-2026-25736 | RU rucio rucio | 4.8 | Feb 25 | Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute |
| CVE-2026-25735 | RU rucio rucio | 4.8 | Feb 25 | Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name |
| CVE-2026-25734 | RU rucio rucio | 4.8 | Feb 25 | Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata |
| CVE-2026-25733 | RU rucio rucio | 5.4 | Feb 25 | Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function |
| CVE-2026-25138 | RU rucio rucio | 5.3 | Feb 25 | Rucio WebUI has Username Enumeration via Login Error Message |
| CVE-2026-25136 | RU rucio rucio | 6.1 | Feb 25 | Rucio WebUI has a Reflected Cross-site Scripting Vulnerability |
| CVE-2025-54064 | HE helm-charts rucio | 6.9 | Jul 17 | rucio-server, rucio-ui, and rucio-webui vulnerable to insertion of X-Rucio-Auth-Token in apache access logfiles |