Product by Yeti-platform
Yeti
8 known vulnerabilities in Yeti (Yeti-platform), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-46507 | Yeti: Code Injection | 7.3 | |
| High | CVE-2026-63502 | Yeti: Path traversal in ExportTask name allows authenticated arbitrary file read and write | 8.3 | |
| High | CVE-2026-92783 | Yeti through 2.11.0 Missing Authorization on RBAC Relationship Deletion | 8.1 | |
| High | CVE-2026-63482 | Yeti: Unauthenticated Access to Full Audit Timeline Discloses All Threat Intelligence Data | 7.5 | |
| High | CVE-2026-63500 | Yeti: Path traversal in DFIQ uuid allows authenticated arbitrary file write during archive export | 7.1 | |
| High | CVE-2026-63489 | Yeti: Authenticated AQL injection via unvalidated search sorting and filter_aliases parameters | 7.6 | |
| High | CVE-2024-46508 | Yeti: Use of Hard-coded Credentials | 7.5 | |
| High | CVE-2024-45412 | Yeti affected by a Potential Denial of Service due to the One Milion Unicode characters attack | 5.3 |