NationalSecurityAgency emissary

• CVE-2026-54442 Medium 4.8 NationalSecurityAgency/emissary: Incomplete fix for CVE-2026-35571: SSRF 0.4%
• CVE-2026-35582 High 8.8 Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix 0.9%
• CVE-2026-35583 Medium 5.3 Emissary has a Path Traversal via Blacklist Bypass in Configuration API 0.3%
• CVE-2026-35581 High 7.2 Emissary has a Command Injection via PLACE_NAME Configuration in Executrix 0.6%
• CVE-2026-35580 Critical 9.1 Emissary has GitHub Actions Shell Injection via Workflow Inputs 0.6%
• CVE-2026-35571 Medium 4.8 Emissary has Stored XSS via Navigation Template Link Injection 0.2%
• CVE-2025-27508 High 7.5 Emissary Use of a Broken or Risky Cryptographic Algorithm 0.2%
• CVE-2021-32639 High 7.2 Server-Side Request Forgery (SSRF) in emissary:emissary 1.4%
• CVE-2021-32647 High 8.0 Post-authentication Remote Code Execution (RCE) in emissary:emissary 2.9%
• CVE-2021-32634 High 7.2 Deserialization of Untrusted Data in Emissary 1.3%