loft-sh

Products

ProductCVEsExploitedLatest
loft2–May 14, 2026

Exploited and recent CVEs

  • CVE-2026-42457 Critical 9.0 vCluster Platform: Stored XSS can lead to privilege escalation 0.3%
  • CVE-2026-22806 Critical 9.1 vCluster Platform's Access Keys Allows Access Beyond Scope 0.5%