Log in Start free

factionsecurity

Products

ProductCVEsExploitedLatest
faction5–May 26, 2026

Exploited and recent CVEs

  • CVE-2026-44668 Critical 9.8 Faction: Unauthenticated Read, Modify, and Delete of Boilerplate Templates 0.4%
  • CVE-2026-44669 High 8.7 Faction: Stored XSS in Assessment Attachment Filename Preview Rendering 0.2%
  • CVE-2026-44667 High 8.7 Faction: Stored XSS in Remediation Verification Attachment Filename Preview Rendering 0.2%
  • CVE-2025-66022 Critical 9.7 FACTION Unauthenticated Custom Extension Upload leads to RCE 0.7%
  • CVE-2025-27422 High 7.5 FACTION Allows Authentication Bypass via User Creation 0.4%