Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Altium vulnerabilities

22 published CVEs name Altium among the affected products.

All 22 in the listAtom feed of new CVEs
Published CVEs
22
Last 12 months
22
Critical
12
Known exploited
0

Critical 12High 7Medium 3Low 0Not scored 0

Newest CVEs

  • CVE-2026-123184

    Incorrect Authorization in Altium 365 Git Service Allows Unauthorized Repository Writes

    Altium · Altium 365

    High7.2
  • CVE-2026-92808

    Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromise

    Altium · Altium Enterprise Server

    Critical10.0
  • CVE-2026-14439

    Path Traversal in Altium Git Service Allows Remote Code Execution

    Altium · Altium Enterprise Server

    Critical9.4
  • CVE-2026-11431

    Path Traversal in Altium Projects Service Allows Arbitrary File Read

    Altium · Altium Enterprise Server

    High8.3
  • CVE-2026-11429

    Path Traversal in Altium Vault ScriptsController Allows Unauthenticated Remote Code Execution

    Altium · Altium Enterprise Server

    Critical10.0
  • CVE-2026-11424

    Server-Side Request Forgery in Altium Platform Design GraphQL Service Allows Information Disclosure

    Altium · Altium Enterprise Server

    High8.3
  • CVE-2026-11423

    Path Traversal in Altium Enterprise Server Collaboration Service Allows Privilege Escalation

    Altium · Altium Enterprise Server

    Critical9.4
  • CVE-2026-11420

    Path Traversal in Altium Enterprise Server NIS Allows Unauthenticated Arbitrary File Write and File Read

    Altium · Altium Enterprise Server

    Critical10.0
  • CVE-2026-11419

    Path Traversal in Altium Enterprise Server Vault UploadController Allows Arbitrary File Write

    Altium · Altium Enterprise Server

    Critical9.4
  • CVE-2026-11414

    Unauthenticated File Exfiltration in Altium Enterprise Server Vault Service via Hard-coded Cryptographic Key and Path Traversal

    Altium · Altium Enterprise Server

    Critical10.0

Products with the most CVEs

  1. Altium Enterprise Server12
  2. Altium 3657
  3. AES3
  4. Altium Live3
  5. Altium Designer1

Most common weaknesses

  1. CWE-22 Path traversal9
  2. CWE-79 Cross-site scripting (XSS)6
  3. CWE-306 Missing authentication for a critical function4
  4. CWE-200 Exposure of sensitive information3
  5. CWE-20 Improper input validation2
  6. CWE-269 Improper privilege management2
  7. CWE-284 Improper access control2
  8. CWE-434 Unrestricted file upload2
  9. CWE-918 Server-side request forgery (SSRF)2
  10. CWE-116 Improper encoding or escaping of output1