What’s Vulnerable › Products

yogeshojha rengine vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your yogeshojha rengine version is affected

Latest yogeshojha rengine vulnerabilities

• CVE-2026-105487 — yogeshojha reNgine listTargets Endpoint tasks.py subdomain_discovery os command injection (CVSS 6.3)
• CVE-2026-92570 — reNgine through 2.2.0 Unauthorized Configuration File Read (CVSS 6.5)
• CVE-2024-58287 — reNgine 2.2.0 Authenticated Command Injection via Scan Engine Configuration (CVSS 8.8)
• CVE-2025-61319 — (CVSS 6.1)
• CVE-2025-24968 — Business Logic And Unrestricted Project Deletion Lead To Take Over the System in reNgine (CVSS 8.8)
• CVE-2025-24967 — Stored XSS on Admin Panel When Deleting a User in reNgine (CVSS 5.4)
• CVE-2025-24966 — HTML Injection in reNgine (CVSS 5.4)
• CVE-2025-24962 — Command Injection in reNgine (CVSS 8.8)
• CVE-2025-24899 — Disclosure of Sensitive User Information via API in reNgine (CVSS 7.5)
• CVE-2024-43381 — reNgine vulnerable to Stored Cross-Site Scripting (XSS) via DNS Record Poisoning (CVSS 5.4)
• CVE-2023-50094 — (CVSS 8.8)
• CVE-2022-36566 — (CVSS 9.8)
• CVE-2022-28995 — (CVSS 9.8)
• CVE-2021-38606 — (CVSS 9.8)