emissary
NationalSecurityAgency- Product type
- Other
- Catalog vulnerabilities
- 9
Severity across 9 analyzed records
Verify to analyze this security profile
en
Severity across 9 analyzed records
Verify to analyze this security profile
As of 09/20/2026, within CyStack's analyzed data, emissary has 0 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of emissary and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-35582Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix | Exploitation statusPublic exploit | FixYes | Published04/18/2026 | SeverityHigh |
CVE-2026-35583Emissary has a Path Traversal via Blacklist Bypass in Configuration API | Exploitation statusNot known exploited | FixYes | Published04/07/2026 | SeverityMedium |
CVE-2026-35581Emissary has a Command Injection via PLACE_NAME Configuration in Executrix | Exploitation statusNot known exploited | FixYes | Published04/07/2026 | SeverityHigh |
CVE-2026-35580Emissary has GitHub Actions Shell Injection via Workflow Inputs | Exploitation statusNot known exploited | FixYes | Published04/07/2026 | SeverityCritical |
CVE-2026-35571Emissary has Stored XSS via Navigation Template Link Injection | Exploitation statusNot known exploited | FixYes | Published04/07/2026 | SeverityMedium |
CVE-2025-27508Emissary Use of a Broken or Risky Cryptographic Algorithm | Exploitation statusPublic exploit | FixYes | Published03/05/2025 | SeverityHigh |
CVE-2021-32639Server-Side Request Forgery (SSRF) in emissary:emissary | Exploitation statusNot confirmed | FixNot confirmed | Published07/02/2021 | SeverityHigh |
CVE-2021-32647Post-authentication Remote Code Execution (RCE) in emissary:emissary | Exploitation statusNot confirmed | FixNot confirmed | Published05/28/2021 | SeverityHigh |
CVE-2021-32634Deserialization of Untrusted Data in Emissary | Exploitation statusNot confirmed | FixYes | Published05/21/2021 | SeverityHigh |