Product by Netflix

    Netflix Lemur

    18 known vulnerabilities in Netflix Lemur (Netflix), 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Netflix Lemur (Netflix)
    HighCVE-2015-7764

    Netflix Lemur: security vulnerability

    		7.5
    CriticalCVE-2026-55166

    Netflix Lemur: Authorization Bypass Through User-Controlled Key

    		9.9
    HighCVE-2026-48508

    Lemur: Authorization bypass in StrictRolePermission / AuthorityCreatorPermission

    		8.8
    HighCVE-2026-71308

    Netflix Lemur: Authorization Bypass Through User-Controlled Key

    		8.1
    HighCVE-2026-71307

    Netflix Lemur: Missing Authorization

    		7.7
    HighCVE-2023-30797

    Insecure Random Generation in Netflix Lemur

    		7.5
    HighCVE-2026-71303

    Netflix Lemur: Server-Side Request Forgery (SSRF)

    		7.7
    HighCVE-2026-70666

    Lemur: Server-Side Request Forgery via the ACME client following server-controlled URLs

    		7.4
    HighCVE-2026-71417

    Netflix Lemur: Authorization Bypass Through User-Controlled Key

    		7.3
    HighCVE-2026-44304

    Lemur: LDAP Filter Injection enables post-authentication privilege escalation

    		8.1
    MediumCVE-2026-55162

    Netflix Lemur: Server-Side Request Forgery (SSRF)

    		6.3
    MediumCVE-2026-55163

    Netflix Lemur: Incorrect Authorization

    		6.3
    MediumCVE-2026-71317

    Lemur: Sub-CA creation never checks `AuthorityPermission` on the parent authority

    		6.5
    MediumCVE-2026-70667

    Netflix Lemur: Time-of-check Time-of-use (TOCTOU) Race Condition

    		6.3
    MediumCVE-2026-55164

    Lemur: Plaintext password storage in Lemur user-update path

    		4.9
    MediumCVE-2026-44305

    Lemur: LDAP TLS certificate verification globally disabled enables credential interception

    		6.8
    MediumCVE-2026-55165

    Netflix Lemur: Improper Verification of Cryptographic Signature

    		4.8
    MediumCVE-2026-71322

    Netflix Lemur: Missing Authorization

    		4.3

    News

    All products by Netflix