Ppinchtab

Products

Exploited and recent CVEs

• CVE-2026-33623 Medium 6.7 PinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command Execution 3.0%
• CVE-2026-33622 Medium 6.1 A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution 0.5%
• CVE-2026-33621 Medium 4.8 PinchTab: Unapplied Rate Limiting Middleware Allows Unbounded Brute-Force of API Token 0.3%
• CVE-2026-33620 Medium 4.3 PinchTab: API Bearer Token Exposed in URL Query Parameter via Server Logs and Intermediary Systems 0.3%
• CVE-2026-33619 Medium 4.1 PinchTab has Unauthenticated Blind SSRF in Task Scheduler via Unvalidated callbackUrl 0.3%
• CVE-2026-33081 Medium 5.8 PinchTab has Blind SSRF via browser-side redirect bypass in /download URL validation 0.3%
• CVE-2026-30834 High 7.5 PinchTab: SSRF with Full Response Exfiltration via Download Handler 0.5%