What’s Vulnerable › Products

its-a-feature Mythic vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your its-a-feature Mythic version is affected

Latest its-a-feature Mythic vulnerabilities

• CVE-2026-119764 — Mythic 3.2.16 through 3.4.0.61 Stored XSS via Agent-Downloaded File Preview (CVSS 6.8)
• CVE-2026-57953 — Mythic < 3.4.0.60 - Unauthorized Automation Workflow Modification via eventing_import_automatic_webhook Endpoint (CVSS 5.4)
• CVE-2026-57952 — Mythic < 3.4.0.60 - Unauthorized C2 Profile Configuration Access via Unverified Payload UUID (CVSS 6.5)
• CVE-2026-57951 — Mythic < 3.4.0.60 - Broken Permission Filter in payload_build_step Table (CVSS 6.5)