What’s Vulnerable › Products

SteeltoeOSS Steeltoe.Management.Endpoint vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your SteeltoeOSS Steeltoe.Management.Endpoint version is affected

Latest SteeltoeOSS Steeltoe.Management.Endpoint vulnerabilities

• CVE-2026-50201 — Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission (CVSS 6.5)
• CVE-2026-50200 — Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords (CVSS 7.5)
• CVE-2026-50194 — Steeltoe vulnerable to management-port isolation bypass via spoofed Host header (CVSS 8.2)