What’s Vulnerable › Products

Freedom of the Press SecureDrop vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Freedom of the Press SecureDrop version is affected

Latest Freedom of the Press SecureDrop vulnerabilities

• CVE-2026-50000 — SecureDrop: API session token reuse against the Journalist Interface web UI (CVSS 5.0)
• CVE-2022-4563 — Freedom of the Press SecureDrop gpg-agent.conf symlink (CVSS 7.8)