Login Request a demo
FA
Product
faction
by factionsecurity · last CVE May 26, 2026
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 2High 3Medium 0Low 0
Severity
All severities5Critical2High3Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add faction to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-44668
9.8
0%
May 26
Faction: Unauthenticated Read, Modify, and Delete of Boilerplate Templates
Affected: < 1.8.3
CVE-2025-66022
9.8
1%
Nov 26
FACTION Unauthenticated Custom Extension Upload leads to RCE
Affected: < 1.7.1
CVE-2026-44669
8.7
0%
May 26
Faction: Stored XSS in Assessment Attachment Filename Preview Rendering
Affected: < 1.8.3
CVE-2026-44667
8.7
0%
May 26
Faction: Stored XSS in Remediation Verification Attachment Filename Preview Rendering
Affected: < 1.8.3
CVE-2025-27422
7.5
0%
Mar 3
FACTION Allows Authentication Bypass via User Creation
Affected: < 1.4.3
Showing 5