All 4 CVE vulnerabilities found in prowler, with AI-generated Chinese analysis, references, and POCs.
Vendor: prowler-cloud
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-73264 | Prowler: Server-Side Request Forgery (SSRF) in Lighthouse Provider CWE-918 | 7.6 | High | 2026-08-12 |
| CVE-2026-73263 | Prowler: RCE on Prowler App workers via kubeconfig auth-provider cmd-path CWE-78 | 9.9 | Critical | 2026-08-12 |
| CVE-2026-73262 | Prowler: Stored XSS in HTML reports through unescaped cloud resource tags CWE-79 | 5.4 | Medium | 2026-08-12 |
| CVE-2026-59151 | Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover CWE-287 | 9.6 | Critical | 2026-07-10 |
All 4 known CVE vulnerabilities affecting prowler with full Chinese analysis, references, and POCs where available.