Product by Factionsecurity

    Faction

    5 known vulnerabilities in Faction (Factionsecurity), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Faction (Factionsecurity)
    CriticalCVE-2025-66022

    FACTION Unauthenticated Custom Extension Upload leads to RCE

    also in 1 other product

    		9.7
    CriticalCVE-2026-44668

    Faction: Unauthenticated Read, Modify, and Delete of Boilerplate Templates

    		9.8
    HighCVE-2026-44667

    Faction: Stored XSS in Remediation Verification Attachment Filename Preview Rendering

    		8.7
    HighCVE-2026-44669

    Faction: Stored XSS in Assessment Attachment Filename Preview Rendering

    		8.7
    HighCVE-2025-27422

    FACTION Allows Authentication Bypass via User Creation

    		7.5

    All products by Factionsecurity