Skip to content
Iits-a-feature
Products
| Product | CVEs | Exploited | Latest |
|---|
| Mythic | 4 | – | Oct 30, 2026 |
Exploited and recent CVEs
-
CVE-2026-119764
Medium 6.8
Mythic 3.2.16 through 3.4.0.61 Stored XSS via Agent-Downloaded File Preview
0.3%
-
CVE-2026-57953
Medium 5.4
Mythic < 3.4.0.60 - Unauthorized Automation Workflow Modification via eventing_import_automatic_webhook Endpoint
0.4%
-
CVE-2026-57952
Medium 5.3
Mythic < 3.4.0.60 - Unauthorized C2 Profile Configuration Access via Unverified Payload UUID
0.3%
-
CVE-2026-57951
Medium 6.5
Mythic < 3.4.0.60 - Broken Permission Filter in payload_build_step Table
0.4%