HubSpot

Products

ProductCVEsExploitedLatest
jinjava2–Feb 4, 2026
HubSpot1–Jul 1, 2026

Exploited and recent CVEs

  • CVE-2026-57736 High 7.4 WordPress HubSpot plugin <= 11.3.51 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-25526 Critical 9.8 JinJava Bypass through ForTag leads to Arbitrary Java Execution 1.0%
  • CVE-2025-59340 Critical 9.8 jinjava Sandbox Bypass via JavaType-Based Deserialization 2.2%