Vendor

    runZero

    15 known vulnerabilities in products by runZero, 0 of them actively exploited (CISA KEV).

    Key figures

    15

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in runZero
    MediumCVE-2026-110265

    runZero search SQL injection

    		6.5
    HighCVE-2026-5373

    runZero Platform superuser privilege escalation

    		8.4
    MediumCVE-2026-5378

    runZero Platform user creation leak

    		6.8
    MediumCVE-2026-5372

    runZero Platform SQL injection in saved queries

    		6.4
    MediumCVE-2026-5376

    runZero Platform session timeout failure

    		5.9
    MediumCVE-2026-5384

    runZero Platform incorrect credential scope

    		5.8
    MediumCVE-2026-5374

    runZero Platform MCP information leak

    		5.8
    LowCVE-2026-81846

    runZero MCP 'Findings summaries' Data Leak

    		3.5
    MediumCVE-2026-5380

    runZero Platform cleartext secret exposure

    		5.3
    MediumCVE-2026-7778

    runZero Platform dashboard configuration exposure

    		5.0
    MediumCVE-2026-5383

    runZero Explorer missing authorization check

    		4.4
    LowCVE-2026-5382

    runZero Platform MCP endpoint information leak

    		3.0
    LowCVE-2026-5379

    runZero Platform MCP certification information leak

    		3.0
    LowCVE-2026-5375

    runZero Platform API credential information leak

    		2.7
    LowCVE-2026-5381

    runZero Platform task information leak

    		2.2

    Products

    Products by runZero
    runZero Platform140
    runZero Platform120