EL
Product
element-web
by element-hq · last CVE Aug 21, 2026
6
CVEs
0
On KEV
7.0
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 3
Watch

Add element-web to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-55850
5.3
1%
Aug 21
Element Web: A malicious homeserver can inject HTML in Element Web using its homepage
Affected: < 1.12.22
CVE-2024-51750
5.0
0%
Nov 12
Element allows a malicious homeserver can modify events leading to unrenderable events or rooms
Affected: < 1.11.85
Showing 2