Vvantage6

Products

Exploited and recent CVEs

• CVE-2026-73652 High 7.1 vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review 0.4%
• CVE-2026-54533 Medium 6.9 vantage6 node has an Improper Access Control issue 0.3%
• CVE-2026-54445 Medium 6.9 Vantage6: Set admin user and password from environment or configuration 0.3%
• CVE-2024-27928 Medium 5.9 Vantage6: 2FA can be circumvented with hacked email access 0.3%
• CVE-2024-24769 Low 2.1 Vantage6: No limit on emails sent for password/MFA reset 0.3%
• CVE-2025-43866 Low 1.7 Vantage6 Server JWT secret not cryptographically secure 0.4%
• CVE-2025-43863 Low 1.7 vantage6 lacks brute-force protection on change password functionality 0.5%
• CVE-2024-32969 Low 2.7 vantage6 collaboration admins can extend their influence by expanding the collaboration 0.3%
• CVE-2024-24562 Medium 5.4 Security headers not set in vantage6-UI 0.3%
• CVE-2024-23823 Medium 4.2 CORS settings overly permissive in vantage6 0.3%
• CVE-2024-24770 Medium 5.3 Username timing attack on recover password/MFA token in vantage6 0.4%
• CVE-2024-22200 Low 3.3 vantage6-UI docker image leaks software version information 0.3%
• CVE-2024-22193 Low 3.5 vantage6 unencrypted task can be created in encrypted collaboration 0.3%
• CVE-2024-21671 Low 3.7 vantage6 username timing attack 0.4%
• CVE-2024-21653 Medium 6.5 vantage6 insecure SSH configuration for node and server containers 0.5%
• CVE-2024-21649 High 8.8 Remote code execution 1.3%
• CVE-2023-47631 High 7.2 vantage6 Node accepts non-whitelisted algorithms from malicious server 0.4%
• CVE-2023-41882 Medium 5.4 vantage6 Improper Access Control vulnerability 0.5%
• CVE-2023-41881 Low 3.7 Deleting a collaboration should also delete linked resources 0.4%
• CVE-2023-28635 Medium 5.4 Defining resource name as integer in vantage6 may give unintended access 0.5%
• CVE-2023-23930 Medium 5.5 vantage6's Pickle serialization is insecure 1.1%
• CVE-2023-23929 High 8.8 Refresh tokens do not expire in Vantage6 0.6%
• CVE-2023-22738 Medium 6.3 Improper Preservation of Permissions in vantage6 0.4%
• CVE-2022-39228 Medium 5.3 Observable Response Discrepancy in vantage6 0.6%