What’s Vulnerable › Products

xwp Stream – Activity Log & Audit Trail vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your xwp Stream – Activity Log & Audit Trail version is affected

Latest xwp Stream – Activity Log & Audit Trail vulnerabilities

• CVE-2026-11907 — Stream <= 4.2.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via Heartbeat API (CVSS 6.5)