What’s Vulnerable › Products

StrangeBee TheHive vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your StrangeBee TheHive version is affected

Latest StrangeBee TheHive vulnerabilities

• CVE-2026-63099 — TheHive 4.1.24 Broken Object Level Authorization via Attachment Download Endpoints (CVSS 6.5)
• CVE-2026-63098 — TheHive 4.1.24 Unauthenticated Information Disclosure via /api/status Endpoint (CVSS 5.3)
• CVE-2025-48741 — (CVSS 6.8)
• CVE-2025-48740 — (CVSS 5.9)
• CVE-2025-48739 — (CVSS 4.6)
• CVE-2025-48738 — (CVSS 6.9)
• CVE-2024-22877 — (CVSS 5.4)
• CVE-2024-22876 — (CVSS 5.4)
• CVE-2023-39069 — (CVSS 9.8)
• CVE-2017-18376 — (CVSS 8.8)