Tuleap Enterprise Edition vulnerabilities | LiveThreat CVE Feed

Product

Tuleap Enterprise Edition

by Dassault Systèmes · last CVE Oct 12, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 0High 9Medium 0Low 0

Severity

All severities9 Critical0 High9 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Tuleap Enterprise Edition to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-105407	8.8	2%	Oct 12	OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 Affected: 17.0-1 through 17.0-40; 17.5-1 through 17.5-31
CVE-2026-84285	8.8	2%	Sep 21	OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 Affected: 17.3-1 through 17.3-12; 17.5-1 through 17.5-28
CVE-2026-105410	8.7	0%	Oct 12	Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 Affected: 17.0-1 through 17.0-41; 17.5-1 through 17.5-32
CVE-2026-105409	8.7	0%	Oct 12	Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 Affected: 17.0-1 through 17.0-41; 17.5-1 through 17.5-32
CVE-2026-105408	8.7	0%	Oct 12	Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 Affected: 17.0-1 through 17.0-41; 17.5-1 through 17.5-32
CVE-2026-105411	8.1	0%	Oct 12	Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 Affected: 17.0-1 through 17.0-41; 17.5-1 through 17.5-32
CVE-2026-19851	7.7	0%	Aug 25	Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 Affected: 17.0-1 through 17.0-36; 17.5-1 through 17.5-24
CVE-2026-14165	7.5	0%	Jul 13	Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 Affected: 17.0-1 through 17.0-31; 17.5-1 through 17.5-17
CVE-2026-105412	7.1	0%	Oct 12	SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 Affected: 17.5-1 through 17.5-35