stepsecurity records

3 published records for vendor stepsecurity.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
25Monitor	CVE-2026-25598No exploit	Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier)stepsecurity · harden-runner · CWE-778 Pre-auth	Medium6.3	—	0.4%	Feb 9, 2026
18Monitor	CVE-2026-32947No exploit	Egress Policy Bypass via DNS over HTTPS (DoH) in Harden-Runner (Community Tier)stepsecurity · harden-runner · CWE-693	Medium4.6	—	0.5%	Mar 20, 2026
18Monitor	CVE-2026-32946No exploit	Egress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)stepsecurity · harden-runner · CWE-693	Medium4.6	—	0.4%	Mar 20, 2026

CVE-2026-25598
25Monitor
Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier)
MediumCVSS 6.3No exploitEPSS 0%
- Pre-auth
stepsecurity · harden-runnerFeb 9, 2026
CVE-2026-32947
18Monitor
Egress Policy Bypass via DNS over HTTPS (DoH) in Harden-Runner (Community Tier)
MediumCVSS 4.6No exploitEPSS 0%
stepsecurity · harden-runnerMar 20, 2026
CVE-2026-32946
18Monitor
Egress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)
MediumCVSS 4.6No exploitEPSS 0%
stepsecurity · harden-runnerMar 20, 2026