Pprowler-cloud

Products

Exploited and recent CVEs

• CVE-2026-73264 High 7.6 Prowler: Server-Side Request Forgery (SSRF) in Lighthouse Provider 0.4%
• CVE-2026-73263 Critical 9.9 Prowler: RCE on Prowler App workers via kubeconfig auth-provider cmd-path 0.7%
• CVE-2026-73262 Medium 5.4 Prowler: Stored XSS in HTML reports through unescaped cloud resource tags 0.3%
• CVE-2026-59151 Critical 9.6 Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover 0.5%