Vendor

    Netflix

    34 known vulnerabilities in products by Netflix, 0 of them actively exploited (CISA KEV).

    Key figures

    34

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    8

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Netflix
    CriticalCVE-2024-4701

    Path Traversal vulnerability via File Uploads in Genie

    		9.9
    CriticalCVE-2022-27177

    ConsoleMe: Format String

    		9.8
    CriticalCVE-2020-9297

    Netflix Titus: security vulnerability

    		9.8
    CriticalCVE-2020-9296

    Netflix Titus: security vulnerability

    		9.8
    HighCVE-2015-7764

    Netflix Lemur: security vulnerability

    		7.5
    CriticalCVE-2024-5023

    Arbitrary File Read Vulnerability in ConsoleMe via Limited Git command RCE

    		—
    CriticalCVE-2023-40171

    Dispatch writes JWT tokens in error message

    		9.1
    HighCVE-2020-2322

    Jenkins Chaos Monkey Plugin: Memory Leak

    also in 1 other product

    		7.5
    CriticalCVE-2026-55166

    Netflix Lemur: Authorization Bypass Through User-Controlled Key

    		9.9
    HighCVE-2026-48508

    Lemur: Authorization bypass in StrictRolePermission / AuthorityCreatorPermission

    		8.8
    HighCVE-2019-10028

    Netflix Dial Reference: Denial of Service

    		7.5
    HighCVE-2024-9301

    Netflix E2Nest: Path Traversal

    		7.5
    HighCVE-2026-71308

    Netflix Lemur: Authorization Bypass Through User-Controlled Key

    		8.1
    CriticalCVE-2024-7093

    Server-Side Template Injection in Dispatch Message Templates

    		—
    HighCVE-2026-71307

    Netflix Lemur: Missing Authorization

    		7.7
    HighCVE-2023-30797

    Insecure Random Generation in Netflix Lemur

    		7.5
    HighCVE-2026-71303

    Netflix Lemur: Server-Side Request Forgery (SSRF)

    		7.7
    MediumCVE-2020-9300

    Netflix Dispatch: security vulnerability

    		6.5
    HighCVE-2026-70666

    Lemur: Server-Side Request Forgery via the ACME client following server-controlled URLs

    		7.4
    MediumCVE-2017-7266

    Netflix Security Monkey: Open Redirect

    		6.1
    HighCVE-2026-71417

    Netflix Lemur: Authorization Bypass Through User-Controlled Key

    		7.3
    HighCVE-2026-44304

    Lemur: LDAP Filter Injection enables post-authentication privilege escalation

    		8.1
    MediumCVE-2026-55163

    Netflix Lemur: Incorrect Authorization

    		6.3
    MediumCVE-2026-55162

    Netflix Lemur: Server-Side Request Forgery (SSRF)

    		6.3
    MediumCVE-2026-71317

    Lemur: Sub-CA creation never checks `AuthorityPermission` on the parent authority

    		6.5

    All vulnerabilities in search

    News

    Products

    Products by Netflix
    Netflix Lemur180
    Netflix Dispatch40