Thorium
CISA- Product type
- Other
- Catalog vulnerabilities
- 7
Severity across 7 analyzed records
Verify to analyze this security profile
en
As of 09/15/2026, within CyStack's analyzed data, Thorium has 0 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Thorium and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2025-35436CISA Thorium account verification email error handling | Exploitation statusNot known exploited | FixYes | Published09/17/2025 | SeverityMedium |
CVE-2025-35435CISA Thorium download stream divide by zero | Exploitation statusPublic exploit | FixYes | Published09/17/2025 | SeverityMedium |
CVE-2025-35434CISA Thorium does not validate TLS connections to Elasticsearch | Exploitation statusPublic exploit | FixYes | Published09/17/2025 | SeverityLow |
CVE-2025-35433CISA Thorium does not properly invalidate previously used tokens | Exploitation statusNot known exploited | FixYes | Published09/17/2025 | SeverityLow |
CVE-2025-35432CISA Thorium does not rate limit account verification email messages | Exploitation statusNot known exploited | FixYes | Published09/17/2025 | SeverityMedium |
CVE-2025-35431CISA Thorium LDAP injection | Exploitation statusNot known exploited | FixYes | Published09/17/2025 | SeverityMedium |
CVE-2025-35430CISA Thorium insecure downloaded file path validation | Exploitation statusPublic exploit | FixYes | Published09/17/2025 | SeverityMedium |