Vendor

    NSA

    46 known vulnerabilities in products by NSA, 0 of them actively exploited (CISA KEV).

    Key figures

    46

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in NSA
    CriticalCVE-2019-16941

    NSA Ghidra: Code Execution

    		9.8
    CriticalCVE-2023-22671

    NSA Ghidra: Command Injection

    		9.8
    HighCVE-2019-13623

    NSA Ghidra: Path Traversal

    		7.8
    CriticalCVE-2019-13625

    NSA Ghidra: XML External Entity (XXE)

    		9.1
    CriticalCVE-2021-32647

    Post-authentication Remote Code Execution (RCE) in emissary:emissary

    also in 1 other product

    		8.0
    HighCVE-2026-35582

    Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix

    also in 1 other product

    		8.8
    HighCVE-2026-52751

    Nationalsecurityagency Ghidra: Deserialization of Untrusted Data

    also in 1 other product

    		8.8
    HighCVE-2021-32094

    NSA Emissary: security vulnerability

    		8.8
    CriticalCVE-2026-35580

    Emissary has GitHub Actions Shell Injection via Workflow Inputs

    also in 1 other product

    		9.1
    CriticalCVE-2021-32639

    Server-Side Request Forgery (SSRF) in emissary:emissary

    also in 1 other product

    		7.2
    HighCVE-2026-52750

    Ghidra < 12.1- Command Injection via URL Annotation Click

    also in 1 other product

    		7.8
    HighCVE-2021-32634

    Deserialization of Untrusted Data in Emissary

    also in 1 other product

    		7.2
    HighCVE-2026-4946

    NSA Ghidra Auto-Analysis Annotation Command Execution

    		8.8
    HighCVE-2026-35581

    Emissary has a Command Injection via PLACE_NAME Configuration in Executrix

    also in 1 other product

    		7.2
    HighCVE-2021-32095

    NSA Emissary: security vulnerability

    		8.1
    HighCVE-2026-52758

    Ghidra < 12.1 - SQL Injection via Unescaped Filter Values in BSim Search

    also in 1 other product

    		8.8
    MediumCVE-2021-32093

    NSA Emissary: security vulnerability

    		6.5
    HighCVE-2026-49498

    Ghidra 11.0 < 12.1 - SQL Injection in PostgreSQL Password Change via Unescaped Username

    also in 1 other product

    		8.8
    HighCVE-2026-52754

    Ghidra < 12.1 - Authentication Bypass via Null Signature in PKIAuthenticationModule

    also in 1 other product

    		8.8
    MediumCVE-2026-115398

    Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount

    also in 1 other product

    		5.5
    MediumCVE-2026-115394

    Ghidra through 12.2 Denial of Service via BinaryField Memory Allocation

    also in 1 other product

    		5.5
    HighCVE-2026-100504

    Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128

    also in 1 other product

    		7.0
    MediumCVE-2026-115397

    Ghidra before 12.2 Denial of Service via Extension Archive Install

    also in 1 other product

    		5.5
    MediumCVE-2026-115396

    Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme Archive

    also in 1 other product

    		5.5
    MediumCVE-2026-115503

    Ghidra before 12.2 Denial of Service via Compressed Extension Archive

    also in 1 other product

    		5.5

    All vulnerabilities in search

    News

    Products

    Products by NSA
    NSA Ghidra310
    Emissary130