Factionsecurity - vulnerabilities (CVEs)

5 CVEs in 1 products, 0 in the last 30 days, newest from 2026-05-26.

Products

• Faction - 5 CVEs

Newest CVEs of Factionsecurity

• CVE-2026-44667 - CVSS 8.7 (high), 2026-05-26: FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored cross-site scripting (XSS) via…
• CVE-2026-44669 - CVSS 8.7 (high), 2026-05-26: FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored cross-site scripting (XSS) via…
• CVE-2026-44668 - CVSS 9.8 (critical), 2026-05-26: FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, AccessControlInterceptor, the authentication gate for all Struts2…
• CVE-2025-66022 - CVSS 9.8 (critical), 2025-11-26: FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to version 1.7.1, an extension execution path in Faction’s extension framework…
• CVE-2025-27422 - CVSS 7.5 (high), 2025-03-03: FACTION is a PenTesting Report Generation and Collaboration Framework. Authentication is bypassed when an attacker registers a new user with admin privileges.…