Log in Start free

azukaar

Products

ProductCVEsExploitedLatest
Cosmos-Server4–Sep 15, 2026

Exploited and recent CVEs

  • CVE-2026-49446 Medium 6.1 Cosmos: Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-Server 0.3%
  • CVE-2026-49447 Medium 5.3 Cosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokens 0.4%
  • CVE-2025-23214 Medium 6.9 Cosmos userbase checking vulnerability 0.7%
  • CVE-2023-49091 High 8.8 Jwttoken in Cosmos server never expires after password changed and logging out 0.8%