Product by Nationalsecurityagency
Emissary
10 known vulnerabilities in Emissary (Nationalsecurityagency), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-32647 | Post-authentication Remote Code Execution (RCE) in emissary:emissary | 8.0 | |
| High | CVE-2026-35582 | Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix | 8.8 | |
| Critical | CVE-2026-35580 | Emissary has GitHub Actions Shell Injection via Workflow Inputs | 9.1 | |
| Critical | CVE-2021-32639 | Server-Side Request Forgery (SSRF) in emissary:emissary | 7.2 | |
| High | CVE-2021-32634 | Deserialization of Untrusted Data in Emissary | 7.2 | |
| High | CVE-2026-35581 | Emissary has a Command Injection via PLACE_NAME Configuration in Executrix | 7.2 | |
| Medium | CVE-2026-54442 | NationalSecurityAgency/emissary: Incomplete fix for CVE-2026-35571: SSRF | 4.8 | |
| Medium | CVE-2026-35583 | Emissary has a Path Traversal via Blacklist Bypass in Configuration API | 5.3 | |
| High | CVE-2025-27508 | Emissary Use of a Broken or Risky Cryptographic Algorithm | 7.5 | |
| Medium | CVE-2026-35571 | Emissary has Stored XSS via Navigation Template Link Injection | 4.8 |