Vendor
Nationalsecurityagency
39 known vulnerabilities in products by Nationalsecurityagency, 0 of them actively exploited (CISA KEV).
Key figures
39
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-32647 | Post-authentication Remote Code Execution (RCE) in emissary:emissary | 8.0 | |
| High | CVE-2026-35582 | Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix | 8.8 | |
| Critical | CVE-2026-54694 | NationalSecurityAgency Skills-service: Cross-site Scripting | 9.6 | |
| High | CVE-2026-52751 | Nationalsecurityagency Ghidra: Deserialization of Untrusted Data | 8.8 | |
| Critical | CVE-2026-35580 | Emissary has GitHub Actions Shell Injection via Workflow Inputs | 9.1 | |
| Critical | CVE-2021-32639 | Server-Side Request Forgery (SSRF) in emissary:emissary | 7.2 | |
| High | CVE-2026-52750 | Ghidra < 12.1- Command Injection via URL Annotation Click | 7.8 | |
| High | CVE-2021-32634 | Deserialization of Untrusted Data in Emissary | 7.2 | |
| High | CVE-2026-35581 | Emissary has a Command Injection via PLACE_NAME Configuration in Executrix | 7.2 | |
| High | CVE-2026-52758 | Ghidra < 12.1 - SQL Injection via Unescaped Filter Values in BSim Search | 8.8 | |
| High | CVE-2026-49498 | Ghidra 11.0 < 12.1 - SQL Injection in PostgreSQL Password Change via Unescaped Username | 8.8 | |
| High | CVE-2026-52754 | Ghidra < 12.1 - Authentication Bypass via Null Signature in PKIAuthenticationModule | 8.8 | |
| Medium | CVE-2026-115398 | Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount | 5.5 | |
| Medium | CVE-2026-115394 | Ghidra through 12.2 Denial of Service via BinaryField Memory Allocation | 5.5 | |
| Medium | CVE-2026-113604 | Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header Counts | 5.5 | |
| High | CVE-2026-100504 | Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128 | 7.0 | |
| Medium | CVE-2026-115397 | Ghidra before 12.2 Denial of Service via Extension Archive Install | 5.5 | |
| Medium | CVE-2026-115396 | Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme Archive | 5.5 | |
| Medium | CVE-2026-115503 | Ghidra before 12.2 Denial of Service via Compressed Extension Archive | 5.5 | |
| Medium | CVE-2026-115395 | Ghidra 10.3 before 12.2 Denial of Service via ThemeReader.readZipTheme() | 5.5 | |
| Medium | CVE-2026-52756 | Ghidra < 12.2 - Unauthenticated Path Traversal in Debugger ISF Server | 6.5 | |
| High | CVE-2026-52755 | Ghidra < 12.0.4 - Path Traversal via Zip Slip in Theme Import | 7.8 | |
| High | CVE-2026-52752 | Ghidra < 12.0.2 - Path Traversal in Extension Installer via ZIP Entry Names | 7.8 | |
| Medium | CVE-2026-96273 | Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDB | 5.5 | |
| Medium | CVE-2026-54442 | NationalSecurityAgency/emissary: Incomplete fix for CVE-2026-35571: SSRF | 4.8 |