DDIRACGrid

Products

Exploited and recent CVEs

• CVE-2026-61668 High 8.1 DIRAC: Pilot code downloaded over unverified HTTPS connection 0.4%
• CVE-2026-61667 Critical 9.9 DIRAC: RCE in FileCatalog DatasetManager via SQL injection + eval 1.2%
• CVE-2026-45579 Critical 9.9 DIRAC: RCE in RequestManager due to eval on untrusted input 0.9%
• CVE-2025-54066 Medium 4.7 DiracX-Web login page has Open Redirect vulnerability 0.4%
• CVE-2024-29905 High 8.1 DIRAC: Unauthorized users can read proxy contents during generation 0.3%
• CVE-2024-24825 Critical 9.1 TokenManager not checking permissions on cached tokens in DIRAC 0.5%