Product by NSA
Emissary
13 known vulnerabilities in Emissary (NSA), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-32647 | Post-authentication Remote Code Execution (RCE) in emissary:emissary | 8.0 | |
| High | CVE-2026-35582 | Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix | 8.8 | |
| High | CVE-2021-32094 | NSA Emissary: security vulnerability | 8.8 | |
| Critical | CVE-2026-35580 | Emissary has GitHub Actions Shell Injection via Workflow Inputs | 9.1 | |
| Critical | CVE-2021-32639 | Server-Side Request Forgery (SSRF) in emissary:emissary | 7.2 | |
| High | CVE-2021-32634 | Deserialization of Untrusted Data in Emissary | 7.2 | |
| High | CVE-2026-35581 | Emissary has a Command Injection via PLACE_NAME Configuration in Executrix | 7.2 | |
| High | CVE-2021-32095 | NSA Emissary: security vulnerability | 8.1 | |
| Medium | CVE-2021-32093 | NSA Emissary: security vulnerability | 6.5 | |
| High | CVE-2021-32096 | NSA Emissary: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2021-32092 | NSA Emissary: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2026-35583 | Emissary has a Path Traversal via Blacklist Bypass in Configuration API | 5.3 | |
| Medium | CVE-2026-35571 | Emissary has Stored XSS via Navigation Template Link Injection | 4.8 |