What’s Vulnerable › Products

semaphoreui semaphore vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your semaphoreui semaphore version is affected

Latest semaphoreui semaphore vulnerabilities

• CVE-2026-91994 — Semaphore UI through 2.19.12 Missing Authorization on GET and HEAD Requests (CVSS 6.5)
• CVE-2026-73294 — Semaphore U: OS Command Injection (CVSS 9.9)
• CVE-2026-73293 — Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision (CVSS 8.8)
• CVE-2026-73292 — Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation (CVSS 8.3)