vantage6 vulnerabilities

CVEs per yearBy the year they were published

1. 20238
2. 20249
3. 20252
4. 20265

Newest CVEs

• CVE-2026-73652

  vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

  vantage6 · vantage6

  High7.1
• CVE-2026-54533

  vantage6 node has an Improper Access Control issue

  vantage6 · vantage6

  Medium6.9
• CVE-2026-54445

  Vantage6: Set admin user and password from environment or configuration

  vantage6 · vantage6

  Medium6.9
• CVE-2024-27928

  Vantage6: 2FA can be circumvented with hacked email access

  vantage6 · vantage6

  Medium5.9
• CVE-2024-24769

  Vantage6: No limit on emails sent for password/MFA reset

  vantage6 · vantage6

  Low2.1
• CVE-2025-43866

  Vantage6 Server JWT secret not cryptographically secure

  vantage6 · vantage6

  Low1.7
• CVE-2025-43863

  vantage6 lacks brute-force protection on change password functionality

  vantage6 · vantage6

  Low1.7
• CVE-2024-32969

  vantage6 collaboration admins can extend their influence by expanding the collaboration

  vantage6 · vantage6

  Low2.7
• CVE-2024-24562

  Security headers not set in vantage6-UI

  vantage6 · vantage6-UI

  Medium5.4
• CVE-2024-23823

  CORS settings overly permissive in vantage6

  vantage6 · vantage6

  Medium4.2