Product by Prowler-cloud
Prowler
4 known vulnerabilities in Prowler (Prowler-cloud), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-73263 | Prowler: RCE on Prowler App workers via kubeconfig auth-provider cmd-path | 9.9 | |
| Critical | CVE-2026-59151 | Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover | 9.6 | |
| High | CVE-2026-73264 | Prowler: Server-Side Request Forgery (SSRF) in Lighthouse Provider | 7.6 | |
| Medium | CVE-2026-73262 | Prowler: Stored XSS in HTML reports through unescaped cloud resource tags | 5.4 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 32sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 27sans-atrisk-mail,