CERT/CC vulnerabilities

CVEs per yearBy the year they were published

1. 20224
2. 20242
3. 20266

Newest CVEs

• CVE-2026-18744

  CVE-2026-18744

  CERT/CC · VINCE

  Medium6.5
• CVE-2026-18749

  CVE-2026-18749

  CERT/CC · VINCE

  Critical9.8
• CVE-2026-18750

  CVE-2026-18750

  CERT/CC · VINCE

  Medium5.3
• CVE-2026-8142

  CVE-2026-8142

  CERT/CC · VINCE

  Medium6.5
• CVE-2026-35467

  Private Key stored as extractable in browser IndexeDB

  CERT/CC · cveClient/encrypt-storage.js

  High7.5
• CVE-2026-35466

  Stored XSS via unsanitized input from remote service

  CERT/CC · cveClient/cveInterface.js

  Medium6.1
• CVE-2024-10469

  CERT/CC VINCE versions before 3.0.9 allows authenticated user to access User Management view.

  CERT/CC · VINCE

  Medium4.4
• CVE-2024-9953

  Potential DoS Vulnerability in CERT VINCE Software Before Version 3.0.8

  CERT/CC · VINCE - Vulnerability Information and Coordination Environment

  Medium4.9
• CVE-2022-40238

  A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5

  CERT/CC · VINCE - The Vulnerability Information and Coordination Environment

  High8.8
• CVE-2022-40257

  An HTML injection vulnerability exists in CERT/CC VINCE software prior to version 1.50.4

  CERT/CC · VINCE - The Vulnerability Information and Coordination Environment

  Medium5.4