Login Request a demo
RU
Product
rucio
by rucio · last CVE May 6, 2026
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 2Medium 6Low 0
Severity
All severities8Critical0High2Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add rucio to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-29090
8.8
0%
May 6
Rucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata database
Affected: >= 1.30.0, < 35.8.5; >= 35.9.0, < 38.5.5; >= 38.6.0, < 39.4.2; >= 40.0.0, < 40.1.1
CVE-2026-29080
8.8
0%
May 6
Rucio SQL Injection in FilterEngine Oracle JSON Path via DID Search API
Affected: >= 1.27.0, < 35.8.5; >= 35.9.0, < 38.5.5; >= 38.6.0, < 39.4.2; >= 40.0.0, < 40.1.1
CVE-2026-25136
6.1
0%
Feb 25
Rucio WebUI has a Reflected Cross-site Scripting Vulnerability
Affected: < 35.8.3; >= 36.0.0rc1, < 38.5.4; >= 39.0.0rc1, < 39.3.1
CVE-2026-25733
5.4
0%
Feb 25
Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function
Affected: < 35.8.3; >= 36.0.0rc1, < 38.5.4; >= 39.0.0rc1, < 39.3.1
CVE-2026-25138
5.3
0%
Feb 25
Rucio WebUI has Username Enumeration via Login Error Message
Affected: < 35.8.3; >= 36.0.0rc1, < 38.5.4; >= 39.0.0rc1, < 39.3.1
CVE-2026-25736
4.8
0%
Feb 25
Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute
Affected: < 35.8.3; >= 36.0.0rc1, < 38.5.4; >= 39.0.0rc1, < 39.3.1
CVE-2026-25735
4.8
0%
Feb 25
Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name
Affected: < 35.8.3; >= 36.0.0rc1, < 38.5.4; >= 39.0.0rc1, < 39.3.1
CVE-2026-25734
4.8
0%
Feb 25
Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata
Affected: < 35.8.3; >= 36.0.0rc1, < 38.5.4; >= 39.0.0rc1, < 39.3.1
Showing 8