Approved changes feed: RSS · Atom
cpe:2.3:a:runzero:platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Runzero (606fafb5-9c2e-5186-b8ec-ca78e5456642) |
|---|---|
| Product | Platform (f310d6a8-b4dd-5bbc-b3d5-06944d439810) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-7778 |
vulnerable | 2026-06-08 08:08:57.667886 |
runZero Platform dashboard configuration exposure
MEDIUM (5)
An issue that could allow a dashboard configuration to be viewed from outside of the authorized organization scope has been resolved. This is an instance of CWE-269: Improper Privilege Management, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N (5.0, Medium). This issue was fixed in version v4.0.260416.0 of the runZero Platform.
Published: 2026-05-05T13:44:38.938Z
Updated: 2026-05-05T14:41:52.389Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5384 |
vulnerable | 2026-06-08 08:07:03.645667 |
runZero Platform incorrect credential scope
MEDIUM (5.8)
An issue that could allow a credential to be updated and used for a task from outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N (5.8 Medium). This issue was fixed in version 4.0.26021.0 of the runZero Platform.
Published: 2026-04-07T14:12:42.547Z
Updated: 2026-04-07T19:59:57.769Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5382 |
vulnerable | 2026-06-08 08:07:03.640011 |
runZero Platform MCP endpoint information leak
LOW (3)
An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N (3.0 Low). This issue was fixed in version 4.0.260206.0 of the runZero Platform.
Published: 2026-04-07T14:12:23.331Z
Updated: 2026-04-07T15:38:38.395Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5381 |
vulnerable | 2026-06-08 08:07:03.639630 |
runZero Platform task information leak
LOW (2.2)
An issue that could expose task information outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N (2.2 Low). This issue was fixed in version 4.0.260205.0 of the runZero Platform.
Published: 2026-04-07T14:12:15.851Z
Updated: 2026-04-07T15:02:37.040Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5380 |
vulnerable | 2026-06-08 08:07:03.639277 |
runZero Platform cleartext secret exposure
MEDIUM (5.3)
An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved. This is an instance of CWE-522: Insufficiently Protected Credentials, and has an estimated CVSS score of
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N (5.3 Medium). This issue was fixed in version 4.0.260204.2 of the runZero Platform.
Published: 2026-04-07T14:12:05.649Z
Updated: 2026-04-07T15:03:47.654Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5379 |
vulnerable | 2026-06-08 08:07:03.638831 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5378 |
vulnerable | 2026-06-08 08:07:03.638363 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5376 |
vulnerable | 2026-06-08 08:07:03.637553 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5375 |
vulnerable | 2026-06-08 08:07:03.637161 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5374 |
vulnerable | 2026-06-08 08:07:03.636713 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5373 |
vulnerable | 2026-06-08 08:07:03.634914 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5372 |
vulnerable | 2026-06-08 08:07:03.633342 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.