Akamai vulnerabilities

Products

• Guardicore Platform Agent 7
• Akamaighost 3
• Cloudtest 3
• Enterprise Application Access 2

Newest

• akamai guardicore platform agent Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates... CVE-2026-50218 8.5 HighOctober 14, 2026
• akamai guardicore platform agent A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform... CVE-2026-50217 4.7 MediumOctober 14, 2026
• akamai guardicore platform agent An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system... CVE-2026-50216 5.3 MediumOctober 14, 2026
• akamai guardicore platform agent A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore... CVE-2026-50215 4.4 MediumOctober 14, 2026
• akamai guardicore platform agent The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege... CVE-2026-46449 6.7 MediumOctober 14, 2026
• akamai guardicore platform agent, zero trust client +1 more Akamai Guardicore Platform Agent (GPA) and Zero Trust Client on Linux and macOS allow TOCTOU... CVE-2026-34354 7.4 HighMay 8, 2026
• akamai ghost Akamai Ghost on Akamai CDN edge servers before 2026-02-06 mishandles processing of custom hop-by... CVE-2026-26365 4.0 MediumFebruary 23, 2026
• akamai akamaighost Akamai Ghost on Akamai CDN edge servers before 2025-11-17 has a chunked request body processing... CVE-2025-66373 4.8 MediumDecember 4, 2025
• akamai guardicore platform agent Akamai Guardicore Platform Agent before 52.1.1 allows an unprivileged user to fully elevate... CVE-2025-53841 7.8 HighDecember 3, 2025
• akamai akamaighost Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an... CVE-2025-54142 4.0 MediumAugust 29, 2025
• akamai akamaighost An issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26.... CVE-2025-32094 Public exploit 4.0 MediumAugust 7, 2025
• akamai rate control Akamai Rate Control alpha before 2025 allows attackers to send requests above the stipulated... CVE-2025-54568 3.7 LowJuly 25, 2025
• akamai cloudtest Akamai CloudTest before 60 2025.06.09 (12989) allows SSRF. CVE-2025-52491 5.8 MediumJune 30, 2025
• akamai cloudtest Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE)... CVE-2025-49493 Public exploit 5.8 MediumJune 30, 2025
• akamai app & api protector Rule 3000216 (before version 2) in Akamai App & API Protector (with Akamai ASE) before 2024-12-10... CVE-2025-30143 5.4 MediumMarch 17, 2025
• akamai enterprise application access An issue was discovered in Akamai Enterprise Application Access (EAA) before 2025-01-17. If an... CVE-2025-24527 8.0 HighJanuary 29, 2025
• akamai secure internet access enterprise threatavert Akamai SIA (Secure Internet Access Enterprise) ThreatAvert, in SPS (Security and Personalization... CVE-2024-45164 7.1 HighNovember 4, 2024
• akamai enterprise application access In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x... CVE-2021-40683 7.8 HighOctober 4, 2021
• akamai enterprise application access Enterprise Access Client Auto-Updater allows for Remote Code Execution prior to version 2.0.1. CVE-2019-18847 9.8 CriticalAugust 26, 2020
• akamai cloudtest Akamai CloudTest before 58.30 allows remote code execution. CVE-2019-11011 9.8 CriticalJune 21, 2019
• akamai netsession Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without... CVE-2016-10157 9.8 CriticalJanuary 23, 2017
• akamai download manager CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows... CVE-2008-1770 Public exploit EPSS 10.4% 9.3 HighJune 4, 2008