Skip to content
Nnektos
Products
| Product | CVEs | Exploited | Latest |
|---|
| act | 4 | – | Aug 24, 2026 |
Exploited and recent CVEs
-
CVE-2026-76847
High 8.8
act 0.2.81 through 0.2.89 Missing Authorization in the Artifacts V4 Backend
0.4%
-
CVE-2026-34042
High 8.2
act: actions/cache server allows malicious cache injection
0.5%
-
CVE-2026-34041
Critical 9.8
act: Unrestricted set-env and add-path command processing enables environment injection
0.6%
-
CVE-2023-22726
High 8.0
Unrestricted file upload leading to privilege escalation in act
1.3%