AP
Vendor
appsmithorg
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-49979 | AP appsmith appsmithorg | 2.7 | Jun 24 | Appsmith: SSRF via `POST /api/v1/admin/send-test-email` — JavaMail Bypasses WebClient IP Filter |
| CVE-2026-55454 | AP appsmith appsmithorg | 9.9 | Jun 24 | Appsmith: Caddy admin API exposed without authentication |
| CVE-2026-55455 | AP appsmith appsmithorg | 9.1 | Jun 24 | Appsmith: SSRF in REST API / GraphQL datasource plugins via insufficient host denylist |
| CVE-2026-50189 | AP appsmith appsmithorg | 7.2 | Jun 24 | Appsmith: RCE via Supervisord XML-RPC Admin Interface Exposed via /supervisor Caddy Route |
| CVE-2026-30862 | AP appsmith appsmithorg | 9.0 | Mar 9 | Critical Stored XSS & Privilege Escalation in Appsmith |
| CVE-2026-24042 | AP appsmith appsmithorg | 9.8 | Jan 22 | Appsmith public apps can execute unpublished actions (viewMode confusion) |
| CVE-2026-22794 | AP appsmith appsmithorg | 8.8 | Jan 12 | Account Takeover Vulnerability in Appsmith |
| CVE-2024-55604 | AP appsmith appsmithorg | 4.3 | Mar 25 | Appsmith's Broken Access Control Allows Viewer Role User to Query Datasources |