TH
Vendor
Thehive-project
4
CVEs
0
On KEV
0
New 30D
Products
TH6.5
TheHive
TheHive-Project
2 CVEs0 on KEV0 new
CO7.2
Cortex
Thehive-project
1 CVEs0 on KEV0 new
CO7.7
Cortex-analyzers
Thehive-project
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-63099 | TH TheHive TheHive-Project | 6.5 | Jul 17 | TheHive 4.1.24 Broken Object Level Authorization via Attachment Download Endpoints |
| CVE-2026-63098 | TH TheHive TheHive-Project | 5.3 | Jul 17 | TheHive 4.1.24 Unauthenticated Information Disclosure via /api/status Endpoint |
| CVE-2019-7652 | CO Cortex-analyzers Thehive-project | 7.7 | May 9 | TheHive Project UnshortenLink analyzer before 1.1, included in Cortex-Analyzers before 1.15.2, has SSRF |
| CVE-2018-20226 | CO Cortex Thehive-project | 7.2 | Dec 21 | An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.toString method |