aehrc pathling vulnerabilities
6 published CVEs name aehrc pathling among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-47664
Pathling: $import-pnp operation enables authenticated SSRF, credential leakage, and warehouse data poisoning
aehrc · pathling
High8.6 - CVE-2026-47663
Pathling: Typed CRUD/search/batch providers can lead to server-wide PHI exfiltration and cross-resource mutation
aehrc · pathling
High8.7 - CVE-2026-47662
Pathling $bulk-submit allows bearer-token exfiltration and persistent warehouse poisoning via unvalidated manifest output URLs
aehrc · pathling
High8.7 - CVE-2026-47661
Pathling has path traversal in $result endpoint that allows arbitrary warehouse file read
aehrc · pathling
High8.7 - CVE-2026-47660
Pathling: Explicit oauthMetadataUrl in bulk-submit allows OAuth client credential exfiltration
aehrc · pathling
High8.7 - CVE-2026-47659
Pathling has path traversal in $import-pnp manifest that enables read-capable SSRF via /jobs/{jobId}/{filename}
aehrc · pathling
High8.7