Log in Start free

Altium

Products

ProductCVEsExploitedLatest
Altium Enterprise Server12–Sep 16, 2026
Altium 3657–Nov 5, 2026
AES3–Jan 22, 2026
Altium Live3–Jan 15, 2026
Altium Designer1–Jan 22, 2026

Exploited and recent CVEs

  • CVE-2026-123184 High 8.1 Incorrect Authorization in Altium 365 Git Service Allows Unauthorized Repository Writes 0.3%
  • CVE-2026-92808 Critical 10.0 Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromise 0.6%
  • CVE-2026-14439 Critical 9.4 Path Traversal in Altium Git Service Allows Remote Code Execution 0.7%
  • CVE-2026-14439 Critical 9.4 Path Traversal in Altium Git Service Allows Remote Code Execution 0.7%
  • CVE-2026-11431 High 8.3 Path Traversal in Altium Projects Service Allows Arbitrary File Read 0.5%
  • CVE-2026-11431 High 8.3 Path Traversal in Altium Projects Service Allows Arbitrary File Read 0.5%
  • CVE-2026-11429 Critical 10.0 Path Traversal in Altium Vault ScriptsController Allows Unauthenticated Remote Code Execution 1.1%
  • CVE-2026-11429 Critical 10.0 Path Traversal in Altium Vault ScriptsController Allows Unauthenticated Remote Code Execution 1.1%
  • CVE-2026-11424 High 8.3 Server-Side Request Forgery in Altium Platform Design GraphQL Service Allows Information Disclosure 0.2%
  • CVE-2026-11424 High 8.3 Server-Side Request Forgery in Altium Platform Design GraphQL Service Allows Information Disclosure 0.2%
  • CVE-2026-11423 Critical 9.4 Path Traversal in Altium Enterprise Server Collaboration Service Allows Privilege Escalation 0.3%
  • CVE-2026-11420 Critical 10.0 Path Traversal in Altium Enterprise Server NIS Allows Unauthenticated Arbitrary File Write and File Read 0.7%
  • CVE-2026-11419 Critical 9.4 Path Traversal in Altium Enterprise Server Vault UploadController Allows Arbitrary File Write 0.5%
  • CVE-2026-11414 Critical 10.0 Unauthenticated File Exfiltration in Altium Enterprise Server Vault Service via Hard-coded Cryptographic Key and Path Traversal 0.5%
  • CVE-2026-9152 Critical 10.0 Unauthenticated SOAP Endpoint in Altium 365 SearchService Allows Cross-Tenant Data Exfiltration and Index Destruction 0.3%
  • CVE-2026-9129 Critical 9.4 Path Traversal in Altium Enterprise Server Viewer StorageController Allows Arbitrary File Read 0.2%
  • CVE-2026-9102 Critical 9.4 Path Traversal in Altium Enterprise Server ComparisonService Allows Arbitrary File Write 0.6%
  • CVE-2025-27380 High 7.6 HTML Injection Leading to Script Execution in Altium Enterprise Server 0.3%
  • CVE-2025-27379 Medium 6.8 Stored Cross-Site Scripting in AES BOM Viewer 0.2%
  • CVE-2025-27378 High 8.6 SQL Injection in AES Due to Inactive SQL Parsing Configuration 0.4%
  • CVE-2025-27377 Medium 5.3 Missing Validation of Self-Signed Certificates in Altium Designer Allows Man-in-the-Middle Attacks 0.2%
  • CVE-2026-1181 Critical 9.0 Altium 365 Over-Permissive CORS Configuration Allows Credentialed Cross-Origin Workspace Access 0.4%
  • CVE-2026-1011 Medium 6.1 Stored Cross-Site Scripting in Altium Live Support Center Comment Endpoint 0.3%
  • CVE-2026-1010 High 8.0 Stored Cross-Site Scripting in Altium Enterprise Server Workflow Engine Allows Privilege Escalation 0.3%
  • CVE-2026-1009 Critical 9.0 Stored Cross-Site Scripting in Altium Live Forum Leading to Cross-Customer Data Exposure 0.2%
  • CVE-2026-1008 High 7.6 Stored Cross-Site Scripting in Altium Live User Profile Fields 0.2%