Browse all 5 CVE security advisories affecting semaphoreui. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-91994 | Semaphore UI through 2.19.12 Missing Authorization on GET and HEAD Requests — semaphore CWE-862 | 6.5 | Medium | 2026-09-15 |
| CVE-2026-73294 | Semaphore U: OS Command Injection — semaphore CWE-78 | 9.9 | Critical | 2026-08-12 |
| CVE-2026-73293 | Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision — semaphore CWE-269 | 8.8 | High | 2026-08-12 |
| CVE-2026-73292 | Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation — semaphore CWE-352 | 8.3 | High | 2026-08-12 |
This page lists every published CVE security advisory associated with semaphoreui. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.