CP
Product
CloudVision Portal
9
CVEs
0
On KEV
9.1
Max CVSS
8
New 30D
Severity mix
Critical 1High 4Medium 4Low 0
Watch
Add CloudVision Portal to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-101158 | 8.4 | Oct 6 | A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS) Affected: 2026.2.0; 2026.1.0 through 2026.1.2; 2025.3.0 through 2025.3.3; 1.0.0 before 2025.3.0 |
| CVE-2026-101153 | 8.0 | Oct 6 | On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists Affected: 2026.2.0; 2026.1.0 through 2026.1.2; 2025.3.0 through 2025.3.3; 2025.2.0 through 2025.2.3; 2025.1.0 through 2025.1.4; 2024.3.0 through 2024.3.3 |
| CVE-2026-101152 | 8.0 | Oct 6 | Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, causes the identity provider (IdP) to deliver Affected: 2026.2.0; 2026.1.0 through 2026.1.2; 2025.3.0 through 2025.3.3; 2021.1.0 before 2025.3.0 |
| CVE-2026-101154 | 7.2 | Oct 6 | An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads t Affected: 2026.2.0; 2026.1.0 through 2026.1.2; 2025.3.0 through 2025.3.3; 2018.1.0 before 2025.3.0 |
Showing 4