VI
Vendor
vitessio
6
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104252 | VI vitess vitessio | 9.8 | Oct 13 | Vitess vttablet /twopcz reflected XSS |
| CVE-2026-65959 | VI vitess vitessio | 5.3 | Aug 18 | Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data |
| CVE-2026-27969 | VI vitess vitessio | 8.8 | Feb 26 | Vitess users with backup storage access can write to arbitrary file paths on restore |
| CVE-2026-27965 | VI vitess vitessio | 9.9 | Feb 26 | Vitess users with backup storage access can gain unauthorized access to production deployment environments |
| CVE-2024-53257 | VI vitess vitessio | 4.9 | Dec 3 | Vitess allows HTML injection in /debug/querylogz & /debug/env |
| CVE-2024-32886 | VI vitess vitessio | 4.9 | May 8 | Vitess vulnerable to infinite memory consumption and vtgate crash |