Ssemaphoreui

Products

Exploited and recent CVEs

• CVE-2026-112305 High 8.8 Semaphore UI through 2.19.16 RCE via Task Environment Ansible Variable Override 0.6%
• CVE-2026-91994 Medium 6.5 Semaphore UI through 2.19.12 Missing Authorization on GET and HEAD Requests 0.4%
• CVE-2026-73294 Critical 9.9 Semaphore U: OS Command Injection 0.7%
• CVE-2026-73293 High 8.8 Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision 0.6%
• CVE-2026-73292 High 8.3 Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation 0.2%