What’s Vulnerable › Products

runZero Platform vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.

Check whether your runZero Platform version is affected

Latest runZero Platform vulnerabilities

• CVE-2026-81846 — runZero MCP 'Findings summaries' Data Leak (CVSS 3.5)
• CVE-2026-7778 — runZero Platform dashboard configuration exposure (CVSS 5.0)
• CVE-2026-5384 — runZero Platform incorrect credential scope (CVSS 5.8)
• CVE-2026-5383 — runZero Explorer missing authorization check (CVSS 4.4)
• CVE-2026-5382 — runZero Platform MCP endpoint information leak (CVSS 3.0)
• CVE-2026-5381 — runZero Platform task information leak (CVSS 2.2)
• CVE-2026-5380 — runZero Platform cleartext secret exposure (CVSS 5.3)
• CVE-2026-5379 — runZero Platform MCP certification information leak (CVSS 3.0)
• CVE-2026-5378 — runZero Platform user creation leak (CVSS 6.8)
• CVE-2026-5376 — runZero Platform session timeout failure (CVSS 5.9)
• CVE-2026-5375 — runZero Platform API credential information leak (CVSS 2.7)
• CVE-2026-5374 — runZero Platform MCP information leak (CVSS 5.8)
• CVE-2026-5373 — runZero Platform superuser privilege escalation (CVSS 8.4)
• CVE-2026-5372 — runZero Platform SQL injection in saved queries (CVSS 6.4)