Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how cvat compares to other vendors in security performance

View Risk Score →

CVAT CVATCVAT: Missing path-containment validation in multiple entry points allows arbitrary path writes

Risk 40
Severity
7.1
First published (updated )
CVE-2026-47682

CVAT CVATCVAT < 2.69.0 - Missing Authorization on Quality Reports parent_id Filter Leaks Cross-Organization Report Existence

Risk 26
Severity
5.3
First published (updated )
CVE-2026-58373

CVAT CVATCVAT: Stored XSS via annotation guides

Risk 59
Severity
8.5
First published (updated )
CVE-2026-44369

CVATCVAT vulnerable to privilege escalation of users with staff status

Risk 56
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2026-23526

CVATCVAT vulnerable to XSS via skeleton SVG images

Risk 44
Severity
8.6
EPSS
0.03%
First published (updated )
CVE-2026-23516
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

CVATCVAT vulnerable to directory traversal via mounted share listing

Risk 26
Severity
5.3
First published (updated )
CVE-2025-68430

CVAT CVATCVAT: Mounted share file overwrite via crafted request

Risk 26
Severity
5.3
First published (updated )
CVE-2025-64485

CVAT CVATCVAT vulnerable to email verification bypass by use of basic authentication

Risk 38
Severity
6.5
First published (updated )
CVE-2025-54573

CVAT CVATCVAT missing validation for in-progress backup upload names

Risk 38
Severity
6.5
First published (updated )
CVE-2025-49135

CVAT Computer Vision Annotation ToolCVAT has information disclosure via browsable API

Risk 25
Severity
5.3
EPSS
0.05%
First published (updated )
CVE-2025-48381
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

CVAT Computer Vision Annotation ToolCVAT allows remote code execution via tracker Nuclio functions

Risk 61
Severity
9.8
EPSS
0.04%
First published (updated )
CVE-2025-23045

CVAT Computer Vision Annotation ToolComputer Vision Annotation Tool (CVAT) access control is broken in several PATCH endpoints

Risk 34
Severity
5.4
First published (updated )
CVE-2024-47172

CVAT Computer Vision Annotation ToolComputer Vision Annotation Tool (CVAT) contains a reflected XSS via request endpoints

Risk 60
Severity
6.3
First published (updated )
CVE-2024-47064

CVAT Computer Vision Annotation ToolComputer Vision Annotation Tool (CVAT) contains a stored XSS via the quality report data endpoint

Risk 57
Severity
6.2
First published (updated )
CVE-2024-47063

CVAT Computer Vision Annotation ToolComputer Vision Annotation Tool (CVAT) is missing authorization for endpoints related to webhook deliveries

Risk 39
Severity
6.4
First published (updated )
CVE-2024-45393
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

CVAT Computer Vision Annotation ToolCVAT's export and backup-related API endpoints are susceptible to CSRF

Risk 47
Severity
7.1
First published (updated )
CVE-2024-37306

CVAT Computer Vision Annotation ToolCVAT SSRF via custom cloud storage endpoints

Risk 55
Severity
8.5
First published (updated )
CVE-2024-37164

CVAT CVATServer-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)

Risk 86
Severity
9.8
First published (updated )
CVE-2022-31188

Apache Log4jApache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack

Risk 96
Severity
9
Exploited
First published (updated )
CVE-2021-45046

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203