Product by runZero
runZero Platform
14 known vulnerabilities in runZero Platform (runZero), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2026-110265 | runZero search SQL injection | 6.5 | |
| High | CVE-2026-5373 | runZero Platform superuser privilege escalation | 8.4 | |
| Medium | CVE-2026-5378 | runZero Platform user creation leak | 6.8 | |
| Medium | CVE-2026-5372 | runZero Platform SQL injection in saved queries | 6.4 | |
| Medium | CVE-2026-5376 | runZero Platform session timeout failure | 5.9 | |
| Medium | CVE-2026-5384 | runZero Platform incorrect credential scope | 5.8 | |
| Medium | CVE-2026-5374 | runZero Platform MCP information leak | 5.8 | |
| Low | CVE-2026-81846 | runZero MCP 'Findings summaries' Data Leak | 3.5 | |
| Medium | CVE-2026-5380 | runZero Platform cleartext secret exposure | 5.3 | |
| Medium | CVE-2026-7778 | runZero Platform dashboard configuration exposure | 5.0 | |
| Low | CVE-2026-5382 | runZero Platform MCP endpoint information leak | 3.0 | |
| Low | CVE-2026-5379 | runZero Platform MCP certification information leak | 3.0 | |
| Low | CVE-2026-5375 | runZero Platform API credential information leak | 2.7 | |
| Low | CVE-2026-5381 | runZero Platform task information leak | 2.2 |