semaphoreui vulnerabilities
5 published CVEs name semaphoreui among the affected products.
- 5Published CVEs5 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-112305
Semaphore UI through 2.19.16 RCE via Task Environment Ansible Variable Override
semaphoreui · Semaphore UI
High8.7 - CVE-2026-91994
Semaphore UI through 2.19.12 Missing Authorization on GET and HEAD Requests
semaphoreui · semaphore
High7.1 - CVE-2026-73294
Semaphore U: OS Command Injection
semaphoreui · semaphore
Critical9.9 - CVE-2026-73293
Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision
semaphoreui · semaphore
High8.8 - CVE-2026-73292
Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation
semaphoreui · semaphore
High8.3