pinchtab vulnerabilities
7 published CVEs name pinchtab among the affected products.
- 7Published CVEs7 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-33623
PinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command Execution
pinchtab · pinchtab
Medium6.7 - CVE-2026-33622
A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution
pinchtab · pinchtab
Medium6.1 - CVE-2026-33621
PinchTab: Unapplied Rate Limiting Middleware Allows Unbounded Brute-Force of API Token
pinchtab · pinchtab
Medium4.8 - CVE-2026-33620
PinchTab: API Bearer Token Exposed in URL Query Parameter via Server Logs and Intermediary Systems
pinchtab · pinchtab
Medium4.3 - CVE-2026-33619
PinchTab has Unauthenticated Blind SSRF in Task Scheduler via Unvalidated callbackUrl
pinchtab · pinchtab
Medium4.1 - CVE-2026-33081
PinchTab has Blind SSRF via browser-side redirect bypass in /download URL validation
pinchtab · pinchtab
Medium5.8 - CVE-2026-30834
PinchTab: SSRF with Full Response Exfiltration via Download Handler
pinchtab · pinchtab
High7.5