AK
Vendor
akuity
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-42350 | KA kargo akuity | 5.1 | May 8 | Kargo: Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter |
| CVE-2026-32828 | KA kargo akuity | 4.9 | Mar 20 | Kargo: SSRF in Promotion http/http-download Steps Enables Internal Network Access and Data Exfiltration |
| CVE-2026-27112 | KA kargo akuity | 9.9 | Feb 20 | Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints |
| CVE-2026-27111 | KA kargo akuity | 5.0 | Feb 20 | Kargo has Missing Authorization Vulnerabilities in Approval & Promotion REST API Endpoints |
| CVE-2026-24748 | KA kargo akuity | 7.2 | Jan 27 | Kargo's `GetConfig()` and `RefreshResource()` API endpoints allow unauthenticated access |