Login Request a demo
EM
Product
emissary
by NationalSecurityAgency · last CVE Apr 18, 2026
5
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 2Medium 2Low 0
Severity
All severities5Critical1High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add emissary to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-35580
9.1
1%
Apr 7
Emissary has GitHub Actions Shell Injection via Workflow Inputs
Affected: < 8.39.0
CVE-2026-35582
8.8
1%
Apr 18
Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix
Affected: < 8.43.0
CVE-2026-35581
7.2
1%
Apr 7
Emissary has a Command Injection via PLACE_NAME Configuration in Executrix
Affected: < 8.39.0
CVE-2026-35583
5.3
0%
Apr 7
Emissary has a Path Traversal via Blacklist Bypass in Configuration API
Affected: < 8.39.0
CVE-2026-35571
4.8
0%
Apr 7
Emissary has Stored XSS via Navigation Template Link Injection
Affected: < 8.39.0
Showing 5