runZero
13 credited records · 13 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
20Monitor | CVE-2026-7778No exploit | runZero Platform dashboard configuration exposurerunzero · platform · CWE-269 | Medium5.0 | — | 0.3% | May 5, 2026 |
23Monitor | CVE-2026-5384No exploit | runZero Platform incorrect credential scoperunzero · runzero platform · CWE-863 | Medium5.8 | — | 0.3% | Apr 7, 2026 |
17Monitor | CVE-2026-5383No exploit | runZero Explorer missing authorization checkrunzero · runzero platform · CWE-863 | Medium4.4 | — | 0.3% | Apr 7, 2026 |
12Monitor | CVE-2026-5382No exploit | runZero Platform MCP endpoint information leakrunzero · runzero platform · CWE-863 | Low3.0 | — | 0.3% | Apr 7, 2026 |
8Monitor | CVE-2026-5381No exploit | runZero Platform task information leakrunzero · runzero platform · CWE-863 | Low2.2 | — | 0.3% | Apr 7, 2026 |
21Monitor | CVE-2026-5380No exploit | runZero Platform cleartext secret exposurerunzero · runzero platform · CWE-863 | Medium5.3 | — | 0.3% | Apr 7, 2026 |
12Monitor | CVE-2026-5379No exploit | runZero Platform MCP certification information leakrunzero · runzero platform · CWE-863 | Low3.0 | — | 0.2% | Apr 7, 2026 |
27Monitor | CVE-2026-5378No exploit | runZero Platform user creation leakrunzero · runzero platform · CWE-863 | Medium6.8 | — | 0.3% | Apr 7, 2026 |
23Monitor | CVE-2026-5376No exploit | runZero Platform session timeout failurerunzero · runzero platform · CWE-613 | Medium5.9 | — | 0.3% | Apr 7, 2026 |
10Monitor | CVE-2026-5375No exploit | runZero Platform API credential information leakrunzero · runzero platform · CWE-200 | Low2.7 | — | 0.3% | Apr 7, 2026 |
23Monitor | CVE-2026-5374No exploit | runZero Platform MCP information leakrunzero · runzero platform · CWE-863 | Medium5.8 | — | 0.3% | Apr 7, 2026 |
33Monitor | CVE-2026-5373No exploit | runZero Platform superuser privilege escalationrunzero · runzero platform · CWE-269 | High8.4 | — | 0.4% | Apr 7, 2026 |
25Monitor | CVE-2026-5372No exploit | runZero Platform SQL injection in saved queriesrunzero · runzero platform · CWE-89 | Medium6.4 | — | 0.3% | Apr 7, 2026 |
- CVE-2026-777820Monitor
runZero Platform dashboard configuration exposure
MediumCVSS 5.0No exploitEPSS 0%runzero · platformMay 5, 2026
- CVE-2026-538423Monitor
runZero Platform incorrect credential scope
MediumCVSS 5.8No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-538317Monitor
runZero Explorer missing authorization check
MediumCVSS 4.4No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-538212Monitor
runZero Platform MCP endpoint information leak
LowCVSS 3.0No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-53818Monitor
runZero Platform task information leak
LowCVSS 2.2No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-538021Monitor
runZero Platform cleartext secret exposure
MediumCVSS 5.3No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-537912Monitor
runZero Platform MCP certification information leak
LowCVSS 3.0No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-537827Monitor
runZero Platform user creation leak
MediumCVSS 6.8No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-537623Monitor
runZero Platform session timeout failure
MediumCVSS 5.9No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-537510Monitor
runZero Platform API credential information leak
LowCVSS 2.7No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-537423Monitor
runZero Platform MCP information leak
MediumCVSS 5.8No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-537333Monitor
runZero Platform superuser privilege escalation
HighCVSS 8.4No exploitEPSS 0%runzero · runzero platformApr 7, 2026
- CVE-2026-537225Monitor
runZero Platform SQL injection in saved queries
MediumCVSS 6.4No exploitEPSS 0%runzero · runzero platformApr 7, 2026