kreaweb records
3 published records for vendor kreaweb.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-862 Missing Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2026-39355No exploit | Genealogy is Missing Authorization in `TeamController::transferOwnership()` Allows Any Authenticated User to Hijack Any Team (Broken Access Control)kreaweb · genealogy · CWE-862 | High8.8 | — | 0.3% | Apr 7, 2026 |
21Monitor | CVE-2025-55287Proof of concept | Genealogy has a stored XSS vulnerabilitykreaweb · genealogy · CWE-79 | Medium5.4 | — | 0.3% | Aug 18, 2025 |
21Monitor | CVE-2025-55288No exploit | Genealogy has a Reflected XSS Vulnerabilitykreaweb · genealogy · CWE-79 | Medium5.4 | — | 0.2% | Aug 18, 2025 |
- CVE-2026-3935535Monitor
Genealogy is Missing Authorization in `TeamController::transferOwnership()` Allows Any Authenticated User to Hijack Any Team (Broken Access Control)
HighCVSS 8.8No exploitEPSS 0%kreaweb · genealogyApr 7, 2026
- CVE-2025-5528721Monitor
Genealogy has a stored XSS vulnerability
MediumCVSS 5.4Proof of conceptEPSS 0%kreaweb · genealogyAug 18, 2025
- CVE-2025-5528821Monitor
Genealogy has a Reflected XSS Vulnerability
MediumCVSS 5.4No exploitEPSS 0%kreaweb · genealogyAug 18, 2025