What’s Vulnerable › Products

Altium Enterprise Server vulnerabilities

15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.

Check whether your Altium Enterprise Server version is affected

Latest Altium Enterprise Server vulnerabilities

CVE-2026-92808 — Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromise (CVSS 10.0)
CVE-2026-14439 — Path Traversal in Altium Git Service Allows Remote Code Execution (CVSS 9.4)
CVE-2026-11431 — Path Traversal in Altium Projects Service Allows Arbitrary File Read (CVSS 8.3)
CVE-2026-11429 — Path Traversal in Altium Vault ScriptsController Allows Unauthenticated Remote Code Execution (CVSS 10.0)
CVE-2026-11424 — Server-Side Request Forgery in Altium Platform Design GraphQL Service Allows Information Disclosure (CVSS 8.3)
CVE-2026-11423 — Path Traversal in Altium Enterprise Server Collaboration Service Allows Privilege Escalation (CVSS 9.4)
CVE-2026-11420 — Path Traversal in Altium Enterprise Server NIS Allows Unauthenticated Arbitrary File Write and File Read (CVSS 9.8)
CVE-2026-11419 — Path Traversal in Altium Enterprise Server Vault UploadController Allows Arbitrary File Write (CVSS 8.8)
CVE-2026-11414 — Unauthenticated File Exfiltration in Altium Enterprise Server Vault Service via Hard-coded Cryptographic Key and Path Traversal (CVSS 9.8)
CVE-2026-9129 — Path Traversal in Altium Enterprise Server Viewer StorageController Allows Arbitrary File Read (CVSS 9.4)
CVE-2026-9102 — Path Traversal in Altium Enterprise Server ComparisonService Allows Arbitrary File Write (CVSS 9.4)
CVE-2025-27380 — HTML Injection Leading to Script Execution in Altium Enterprise Server (CVSS 7.6)
CVE-2025-27379 — Stored Cross-Site Scripting in AES BOM Viewer (CVSS 4.6)
CVE-2025-27378 — SQL Injection in AES Due to Inactive SQL Parsing Configuration (CVSS 9.8)
CVE-2026-1010 — Stored Cross-Site Scripting in Altium Enterprise Server Workflow Engine Allows Privilege Escalation (CVSS 5.4)