Log in Start free

ExpressGateway

Products

ProductCVEsExploitedLatest
express-gateway4–Oct 7, 2026

Exploited and recent CVEs

  • CVE-2026-107177 Medium 5.9 Express Gateway through 1.16.11 Hardcoded Default cipherKey Exposes OAuth Tokens 0.3%
  • CVE-2026-107162 Medium 6.8 Express Gateway through 1.16.11 OAuth 2.0 Refresh Token Validation Bypass 0.4%
  • CVE-2025-9096 Low 3.5 ExpressGateway express-gateway REST Endpoint apps.js cross site scripting 0.3%
  • CVE-2025-9095 Low 3.5 ExpressGateway express-gateway REST Endpoint users.js cross site scripting 0.3%