- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, maas recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of maas and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2025-7044Privilege Escalation in MAAS via Websocket Request ManipulationCVE-2015-1320Probe-and-enlist for SeaMicro chassis writes password to the logCVE-2014-1428uuid.uuid1() is not suitable as an unguessable identifier/tokenCVE-2014-1427MAAS API vulnerable to CSRF attackCVE-2014-1426get_file_by_name does not check owner| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2025-7044Privilege Escalation in MAAS via Websocket Request Manipulation | Exploitation statusNot exploited | FixYes | Published12/03/2025 | SeverityHigh |
CVE-2015-1320Probe-and-enlist for SeaMicro chassis writes password to the log | Exploitation statusNot confirmed | FixYes | Published04/22/2019 | SeverityMedium |
CVE-2014-1428uuid.uuid1() is not suitable as an unguessable identifier/token | Exploitation statusNot confirmed | FixYes | Published04/22/2019 | SeverityLow |
CVE-2014-1427MAAS API vulnerable to CSRF attack | Exploitation statusNot confirmed | FixYes | Published04/22/2019 | SeverityCritical |
CVE-2014-1426get_file_by_name does not check owner | Exploitation statusNot confirmed | FixYes | Published04/22/2019 | SeverityHigh |
5 Results | Page 1 of 1