Log in Start free

rucio

Products

ProductCVEsExploitedLatest
rucio9–Nov 5, 2026
helm-charts1–Jul 17, 2025

Exploited and recent CVEs

  • CVE-2026-58273 High 8.1 Rucio: Authorisation Bypass on REST API endpoint for signing URLs 0.6%
  • CVE-2026-29090 Critical 9.0 Rucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata database 0.3%
  • CVE-2026-29080 Critical 9.4 Rucio SQL Injection in FilterEngine Oracle JSON Path via DID Search API 0.3%
  • CVE-2026-25736 Medium 6.1 Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute 0.3%
  • CVE-2026-25735 Medium 6.1 Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name 0.3%
  • CVE-2026-25734 Medium 6.1 Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata 0.3%
  • CVE-2026-25733 High 7.3 Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function 0.3%
  • CVE-2026-25138 Medium 5.3 Rucio WebUI has Username Enumeration via Login Error Message 0.4%
  • CVE-2026-25136 High 8.1 Rucio WebUI has a Reflected Cross-site Scripting Vulnerability 0.3%
  • CVE-2025-54064 Medium 6.9 rucio-server, rucio-ui, and rucio-webui vulnerable to insertion of X-Rucio-Auth-Token in apache access logfiles 0.5%