Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

akuity vulnerabilities

6 published CVEs name akuity among the affected products.

Newest CVEs

  • CVE-2026-61850

    Kargo: Privilege escalation via Project RBAC management in the Kargo API

    akuity · kargo

    Critical9.3
  • CVE-2026-42350

    Kargo: Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter

    akuity · kargo

    Medium5.1
  • CVE-2026-32828

    Kargo: SSRF in Promotion http/http-download Steps Enables Internal Network Access and Data Exfiltration

    akuity · kargo

    Medium5.1
  • CVE-2026-27112

    Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints

    akuity · kargo

    Critical9.4
  • CVE-2026-27111

    Kargo has Missing Authorization Vulnerabilities in Approval & Promotion REST API Endpoints

    akuity · kargo

    Medium5.3
  • CVE-2026-24748

    Kargo's `GetConfig()` and `RefreshResource()` API endpoints allow unauthenticated access

    akuity · kargo

    Medium6.9