What’s Vulnerable › Products

factionsecurity faction vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your factionsecurity faction version is affected

Latest factionsecurity faction vulnerabilities

• CVE-2026-44669 — Faction: Stored XSS in Assessment Attachment Filename Preview Rendering (CVSS 8.7)
• CVE-2026-44668 — Faction: Unauthenticated Read, Modify, and Delete of Boilerplate Templates (CVSS 9.8)
• CVE-2026-44667 — Faction: Stored XSS in Remediation Verification Attachment Filename Preview Rendering (CVSS 8.7)
• CVE-2025-66022 — FACTION Unauthenticated Custom Extension Upload leads to RCE (CVSS 9.8)
• CVE-2025-27422 — FACTION Allows Authentication Bypass via User Creation (CVSS 7.5)