MGeurts

Products

ProductCVEsExploitedLatest
genealogy3–Apr 7, 2026

Exploited and recent CVEs

  • CVE-2026-39355 Critical 10.0 Genealogy is Missing Authorization in `TeamController::transferOwnership()` Allows Any Authenticated User to Hijack Any Team (Broken Access Control) 0.3%
  • CVE-2025-55288 Medium 5.5 Genealogy has a Reflected XSS Vulnerability 0.3%
  • CVE-2025-55287 High 8.0 Genealogy has a stored XSS vulnerability 0.3%