Wwarp-tech

Products

Exploited and recent CVEs

• CVE-2026-91163 Low 3.7 Warpgate: Kubernetes listener discloses internal error text to an unauthenticated caller 0.2%
• CVE-2026-91168 Medium 6.8 Warpgate: Kubernetes authorization correlation can be reused by a recreated same-name account 0.3%
• CVE-2026-91167 Medium 6.0 Warpgate: Missing authorization check on `PUT /users/:id/roles/:role_id` allows any admin to bypass the `AccessRolesAssign` permission boundary 0.4%
• CVE-2026-91166 Medium 5.7 Warpgate: Web SSH stores a jump host's key against the target's address, so it validates as the target 0.2%
• CVE-2026-91165 Low 2.4 Warpgate: Markup injection in SSO form_post return page via unencoded redirect/error values 0.4%
• CVE-2026-91164 Medium 4.3 Warpgate: API tokens bypass the user's allowed_ip_ranges restriction 0.4%
• CVE-2026-63330 High 7.7 Warpgate: Missing Admin Authorization on Live Recording Stream WebSocket Allows Any Authenticated User to Eavesdrop on Terminal Sessions 0.5%
• CVE-2026-63329 Medium 4.9 Warpgate: x-warpgate-username Header Not Stripped from Client Requests Enables Identity Spoofing to WebSocket Backend Targets 0.3%
• CVE-2026-58491 Critical 9.3 Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter 0.5%
• CVE-2026-44347 Medium 5.8 Warpgate: SSO CSRF -- State Token Not Validated on Return 0.1%
• CVE-2023-48712 High 7.1 User authorization bug leading to privilege escalation in warpgate 0.7%
• CVE-2023-43660 Medium 4.8 SSH key password bypassed in warpgate 0.3%
• CVE-2023-37268 Medium 6.4 User login confusion with SSO in warpgate 0.5%
• CVE-2023-28113 Medium 5.9 russh may use insecure Diffie-Hellman keys 0.6%