MITRE

Products

ProductCVEsExploitedLatest
Caldera1–Feb 24, 2025
Heimdall1–Aug 29, 2026

Exploited and recent CVEs

  • CVE-2026-82477 Medium 5.8 In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/te 0.5%
  • CVE-2025-27364 Critical 10.0 In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution (RCE) vulnerability was found in the dynamic agent (implant) compilation functionality of the server. This allows remot 25.9%