runZero records
12 published records for vendor runzero.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-863 Incorrect Authorization8
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-269 Improper Privilege Management1
- CWE-613 Insufficient Session Expiration1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
12 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
33Monitor | CVE-2026-5373No exploit | runZero Platform superuser privilege escalationrunzero · runzero platform · CWE-269 | High8.4 | — | 0.4% | Apr 7, 2026 |
27Monitor | CVE-2026-5378No exploit | runZero Platform user creation leakrunzero · runzero platform · CWE-863 | Medium6.8 | — | 0.3% | Apr 7, 2026 |
25Monitor | CVE-2026-5372No exploit | runZero Platform SQL injection in saved queriesrunzero · runzero platform · CWE-89 | Medium6.4 | — | 0.3% | Apr 7, 2026 |
23Monitor | CVE-2026-5376No exploit | runZero Platform session timeout failurerunzero · runzero platform · CWE-613 | Medium5.9 | — | 0.3% | Apr 7, 2026 |
23Monitor | CVE-2026-5384No exploit | runZero Platform incorrect credential scoperunzero · runzero platform · CWE-863 | Medium5.8 | — | 0.3% | Apr 7, 2026 |
23Monitor | CVE-2026-5374No exploit | runZero Platform MCP information leakrunzero · runzero platform · CWE-863 | Medium5.8 | — | 0.3% | Apr 7, 2026 |
21Monitor | CVE-2026-5380No exploit | runZero Platform cleartext secret exposurerunzero · runzero platform · CWE-863 | Medium5.3 | — | 0.3% | Apr 7, 2026 |
17Monitor | CVE-2026-5383No exploit | runZero Explorer missing authorization checkrunzero · runzero platform · CWE-863 | Medium4.4 | — | 0.3% | Apr 7, 2026 |
12Monitor | CVE-2026-5382No exploit | runZero Platform MCP endpoint information leakrunzero · runzero platform · CWE-863 | Low3.0 | — | 0.3% | Apr 7, 2026 |
12Monitor | CVE-2026-5379No exploit | runZero Platform MCP certification information leakrunzero · runzero platform · CWE-863 | Low3.0 | — | 0.2% | Apr 7, 2026 |
10Monitor | CVE-2026-5375No exploit | runZero Platform API credential information leakrunzero · runzero platform · CWE-200 | Low2.7 | — | 0.3% | Apr 7, 2026 |
8Monitor | CVE-2026-5381No exploit | runZero Platform task information leakrunzero · runzero platform · CWE-863 | Low2.2 | — | 0.3% | Apr 7, 2026 |
- CVE-2026-537333Monitor
runZero Platform superuser privilege escalation
HighCVSS 8.4No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-537827Monitor
runZero Platform user creation leak
MediumCVSS 6.8No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-537225Monitor
runZero Platform SQL injection in saved queries
MediumCVSS 6.4No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-537623Monitor
runZero Platform session timeout failure
MediumCVSS 5.9No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-538423Monitor
runZero Platform incorrect credential scope
MediumCVSS 5.8No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-537423Monitor
runZero Platform MCP information leak
MediumCVSS 5.8No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-538021Monitor
runZero Platform cleartext secret exposure
MediumCVSS 5.3No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-538317Monitor
runZero Explorer missing authorization check
MediumCVSS 4.4No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-538212Monitor
runZero Platform MCP endpoint information leak
LowCVSS 3.0No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-537912Monitor
runZero Platform MCP certification information leak
LowCVSS 3.0No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-537510Monitor
runZero Platform API credential information leak
LowCVSS 2.7No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-53818Monitor
runZero Platform task information leak
LowCVSS 2.2No exploitEPSS 0%runzero · runzero platformApr 7, 2026