HubSpot vulnerabilities

3 published CVEs name HubSpot among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 2
Critical: 2
Known exploited: 0

Critical 2High 1Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

20251
20262

Newest CVEs

CVE-2026-57736
WordPress HubSpot plugin <= 11.3.51 - Sensitive Data Exposure vulnerability
HubSpot · HubSpot
High7.4
CVE-2026-25526
JinJava Bypass through ForTag leads to Arbitrary Java Execution
HubSpot · jinjava
Critical9.8
CVE-2025-59340
jinjava Sandbox Bypass via JavaType-Based Deserialization
HubSpot · jinjava
Critical9.8

Products with the most CVEs

Most common weaknesses