Vendor

    GCHQ

    7 known vulnerabilities in products by GCHQ, 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in GCHQ
    CriticalCVE-2018-1000651

    Gchq Stroom: XML External Entity (XXE)

    		10.0
    CriticalCVE-2025-25182

    Stroom Authentication/Authorization Bypass when using AWS ALB

    		9.4
    MediumCVE-2019-15532

    CyberChef: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2019-10779

    Stroom:stroom-app: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2026-42615

    GCHQ CyberChef: Cross-site Scripting

    		7.2
    MediumCVE-2026-72912

    GCHQ CyberChef: Inefficient Regular Expression Complexity

    		4.3
    MediumCVE-2026-57439

    CyberChef: Prototype pollution in Series Chart operation

    		5.0

    Products

    Products by GCHQ
    CyberChef40
    Gchq Stroom30