Login Request a demo
GO
Product
gophish
by gophish · last CVE Oct 7, 2026
7
CVEs
0
On KEV
8.1
Max CVSS
5
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 2Medium 4Low 1
Severity
All severities7Critical0High2Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add gophish to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-82269
8.1
1%
Aug 28
Gophish Account Lockout and Forced Password Change Bypassable via API Key
Affected: through 0.12.1
CVE-2026-107270
7.1
0%
Oct 7
Gophish through 0.12.1 Object Takeover via Client-Supplied ID on API Create Endpoints
Affected: through 0.12.1
Showing 2