Yyeti-platform

Products

Exploited and recent CVEs

• CVE-2026-63500 High 7.1 Yeti: Path traversal in DFIQ uuid allows authenticated arbitrary file write during archive export 0.4%
• CVE-2026-63502 High 8.3 Yeti: Path traversal in ExportTask name allows authenticated arbitrary file read and write 0.4%
• CVE-2026-63482 High 7.5 Yeti: Unauthenticated Access to Full Audit Timeline Discloses All Threat Intelligence Data 0.4%
• CVE-2026-63489 High 7.6 Yeti: Authenticated AQL injection via unvalidated search sorting and filter_aliases parameters 0.3%
• CVE-2026-92783 High 8.1 Yeti through 2.11.0 Missing Authorization on RBAC Relationship Deletion 0.5%
• CVE-2024-45412 Medium 5.3 Yeti affected by a Potential Denial of Service due to the One Milion Unicode characters attack 0.8%