@backstage

Products

Exploited and recent CVEs

• CVE-2026-115923 Medium 6.5 Backstage catalog rules can be bypassed for URL locations using encoded path segments 0.3%
• CVE-2026-106495 Medium 4.3 Backstage: Improper access control in backend action invocation 0.2%
• CVE-2026-106495 Medium 4.3 Backstage: Improper access control in backend action invocation 0.2%
• CVE-2026-106557 High 7.7 Backstage: Improper input validation in TechDocs Markdown extension configuration 0.4%
• CVE-2026-106557 High 7.7 Backstage: Improper input validation in TechDocs Markdown extension configuration 0.4%
• CVE-2026-106563 Medium 5.3 Backstage: Improper entity validation in deprecated Kubernetes services endpoint 0.2%
• CVE-2026-106563 Medium 5.3 Backstage: Improper entity validation in deprecated Kubernetes services endpoint 0.2%
• CVE-2026-106562 Medium 4.3 Backstage: Incorrect authorization in search engine permission filtering 0.2%
• CVE-2026-106562 Medium 4.3 Backstage: Incorrect authorization in search engine permission filtering 0.2%
• CVE-2026-106562 Medium 4.3 Backstage: Incorrect authorization in search engine permission filtering 0.2%
• CVE-2026-106561 Medium 5.0 Backstage: Sensitive information disclosure in Kubernetes resource queries 0.2%
• CVE-2026-106561 Medium 5.0 Backstage: Sensitive information disclosure in Kubernetes resource queries 0.2%
• CVE-2026-106560 High 7.1 Backstage: Improper repository path validation in a Scaffolder backend module 0.3%
• CVE-2026-106560 High 7.1 Backstage: Improper repository path validation in a Scaffolder backend module 0.3%
• CVE-2026-106559 Medium 6.3 Backstage: Improper input validation in Confluence to Markdown scaffolder module 0.3%
• CVE-2026-106559 Medium 6.3 Backstage: Improper input validation in Confluence to Markdown scaffolder module 0.3%
• CVE-2026-106558 High 8.8 Backstage: Improper validation of TechDocs MkDocs configuration 0.5%
• CVE-2026-106558 High 8.8 Backstage: Improper validation of TechDocs MkDocs configuration 0.5%
• CVE-2026-106556 High 7.7 Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization 0.3%
• CVE-2026-106556 High 7.7 Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization 0.3%
• CVE-2026-106510 High 7.7 Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml 0.5%
• CVE-2026-106510 High 7.7 Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml 0.5%
• CVE-2026-106509 High 7.7 Backstage: Improper validation of MkDocs theme configuration in TechDocs 0.5%
• CVE-2026-106509 High 7.7 Backstage: Improper validation of MkDocs theme configuration in TechDocs 0.5%
• CVE-2026-106508 Medium 5.3 Backstage: Potential file exposure through local TechDocs publisher 0.4%
• CVE-2026-106508 Medium 5.3 Backstage: Potential file exposure through local TechDocs publisher 0.4%
• CVE-2026-106507 Medium 5.3 Backstage: TechDocs arbitrary file read via mkdocs snippets 0.4%
• CVE-2026-106506 Medium 5.3 Backstage: Improper input validation in scaffolder task list ordering 0.2%
• CVE-2026-106506 Medium 5.3 Backstage: Improper input validation in scaffolder task list ordering 0.2%
• CVE-2026-106505 High 7.7 Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend 0.3%