What’s Vulnerable › Products

NationalSecurityAgency emissary vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your NationalSecurityAgency emissary version is affected

Latest NationalSecurityAgency emissary vulnerabilities

• CVE-2026-35582 — Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix (CVSS 8.8)
• CVE-2026-35583 — Emissary has a Path Traversal via Blacklist Bypass in Configuration API (CVSS 5.3)
• CVE-2026-35581 — Emissary has a Command Injection via PLACE_NAME Configuration in Executrix (CVSS 7.2)
• CVE-2026-35580 — Emissary has GitHub Actions Shell Injection via Workflow Inputs (CVSS 9.1)
• CVE-2026-35571 — Emissary has Stored XSS via Navigation Template Link Injection (CVSS 4.8)
• CVE-2025-27508 — Emissary Use of a Broken or Risky Cryptographic Algorithm (CVSS 7.5)
• CVE-2021-32639 — Server-Side Request Forgery (SSRF) in emissary:emissary (CVSS 9.9)
• CVE-2021-32647 — Post-authentication Remote Code Execution (RCE) in emissary:emissary (CVSS 9.1)
• CVE-2021-32634 — Deserialization of Untrusted Data in Emissary (CVSS 7.2)
• CVE-2021-32093 — (CVSS 6.5)
• CVE-2021-32092 — (CVSS 6.1)
• CVE-2021-32096 — (CVSS 8.8)
• CVE-2021-32095 — (CVSS 8.1)
• CVE-2021-32094 — (CVSS 8.8)