Vvitessio

Products

Exploited and recent CVEs

• CVE-2026-104252 Critical 9.8 Vitess vttablet /twopcz reflected XSS 1.2%
• CVE-2026-65959 Medium 5.3 Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data 0.4%
• CVE-2026-27969 Critical 9.3 Vitess users with backup storage access can write to arbitrary file paths on restore 0.5%
• CVE-2026-27965 High 8.4 Vitess users with backup storage access can gain unauthorized access to production deployment environments 0.5%
• CVE-2024-53257 Medium 4.9 Vitess allows HTML injection in /debug/querylogz & /debug/env 0.4%
• CVE-2024-32886 Medium 4.9 Vitess vulnerable to infinite memory consumption and vtgate crash 0.8%
• CVE-2023-29195 Medium 4.1 Vitess VTAdmin users that can create shards can deny access to other functions 1.0%
• CVE-2023-29194 Medium 4.1 vitess allows users to create keyspaces that can deny access to already existing keyspaces 0.8%