What’s Vulnerable › Products

prowler-cloud prowler vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your prowler-cloud prowler version is affected

Latest prowler-cloud prowler vulnerabilities

• CVE-2026-100169 — Account pre-hijacking in the Prowler API through email based social account linking without verification (CVSS 7.6)
• CVE-2026-73264 — Prowler: Server-Side Request Forgery (SSRF) in Lighthouse Provider (CVSS 7.6)
• CVE-2026-73263 — Prowler: RCE on Prowler App workers via kubeconfig auth-provider cmd-path (CVSS 9.9)
• CVE-2026-73262 — Prowler: Stored XSS in HTML reports through unescaped cloud resource tags (CVSS 5.4)
• CVE-2026-59151 — Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover (CVSS 9.6)