Vendor
Rucio
9 known vulnerabilities in products by Rucio, 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-29080 | Rucio SQL Injection in FilterEngine Oracle JSON Path via DID Search API | 8.8 | |
| Critical | CVE-2026-29090 | Rucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata database | 8.8 | |
| High | CVE-2026-25136 | Rucio WebUI has a Reflected Cross-site Scripting Vulnerability | 8.1 | |
| Medium | CVE-2025-54064 | Rucio Helm-charts: Insertion of Sensitive Information into Log File | — | |
| High | CVE-2026-25733 | Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function | 7.3 | |
| Medium | CVE-2026-25736 | Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute | 6.1 | |
| Medium | CVE-2026-25734 | Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata | 6.1 | |
| Medium | CVE-2026-25735 | Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name | 6.1 | |
| Medium | CVE-2026-25138 | Rucio WebUI has Username Enumeration via Login Error Message | 5.3 |
Products
| Rucio | 8 | 0 |