CVE-2026-5372

Description

References

• help.runzero.com/docs/release-notes · Release Notes
• runzero.com/advisories/runzero-platform-saved-sqli-cve-2026-5372 · Vendor Advisory

Altre vulnerabilità di runzero platform

• CVE-2026-5384MEDIO 5.8An issue that could allow a credential to be updated and used for a task from outside of the authorized organization scope has been resolved…
• CVE-2026-5383MEDIO 4.4An issue that could allow access to Explorer groups from outside of the authorized organization scope has been resolved. This is an instance…
• CVE-2026-5382BASSO 3.0An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been resolved. This is an inst…
• CVE-2026-5381BASSO 2.2An issue that could expose task information outside of the authorized organization scope has been resolved. This is an instance of CWE-863: …
• CVE-2026-5380MEDIO 5.3An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved. T…