What’s Vulnerable › Products

azukaar Cosmos-Server vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your azukaar Cosmos-Server version is affected

Latest azukaar Cosmos-Server vulnerabilities

• CVE-2026-49446 — Cosmos: Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-Server (CVSS 6.1)
• CVE-2026-49447 — Cosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokens (CVSS 5.3)
• CVE-2025-23214 — Cosmos userbase checking vulnerability (CVSS 6.9)
• CVE-2023-49091 — Jwttoken in Cosmos server never expires after password changed and logging out (CVSS 9.8)