Pivotick

Products

ProductCVEsExploitedLatest
Pivotick8–Jul 28, 2026

Exploited and recent CVEs

  • CVE-2026-67174 Critical 9.2 DOM-Based Cross-Site Scripting via Unsafe String and SVG Icon Rendering in Pivotick 0.6%
  • CVE-2026-67173 Medium 5.1 Pivotick Unvalidated Node Image URLs Allow Unintended Client-Side Requests 0.4%
  • CVE-2026-66922 Medium 5.1 Pivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of Service 0.5%
  • CVE-2026-66921 Medium 6.3 Pivotick - Stored DOM-Based Cross-Site Scripting via Unescaped Markdown Node References 0.4%
  • CVE-2026-66920 High 8.2 Pivotick - Stack Exhaustion Denial of Service via Deep or Cyclic Graph Data 0.4%
  • CVE-2026-66919 Medium 6.9 Stored DOM-Based Cross-Site Scripting in Node Modal Headers 0.4%
  • CVE-2026-66918 High 8.2 DOM-Based Cross-Site Scripting via Unsanitized SVG Node Icons 0.4%
  • CVE-2026-66825 Medium 6.9 Cross-Site Scripting via Unsafe URL Schemes in Pivotick Property Links 0.4%