Altium vulnerabilities

Products

• Enterprise Server 12
• 365 7
• On-prem Enterprise Server 7
• Aes 4
• Live 3
• Live 3

Newest

• altium 365 Incorrect Authorization in Altium 365 Git Service Allows Unauthorized Repository Writes CVE-2026-123184 7.2 HighNovember 5, 2026
• altium enterprise server Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromise CVE-2026-92808 10.0 CriticalSeptember 16, 2026
• altium aes, asustor inc. abp +1 more An improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync. CVE-2026-18759 8.5 HighAugust 4, 2026
• altium 365, enterprise server +1 more Path Traversal in Altium Git Service Allows Remote Code Execution CVE-2026-14439 9.4 CriticalJuly 1, 2026
• altium 365, enterprise server +1 more Path Traversal in Altium Projects Service Allows Arbitrary File Read CVE-2026-11431 8.3 HighJune 5, 2026
• altium 365, enterprise server +1 more Path Traversal in Altium Vault ScriptsController Allows Unauthenticated Remote Code Execution CVE-2026-11429 10.0 CriticalJune 5, 2026
• altium 365, enterprise server +1 more Server-Side Request Forgery in Altium Platform Design GraphQL Service Allows Information Disclosure CVE-2026-11424 8.3 HighJune 5, 2026
• altium enterprise server Path Traversal in Altium Enterprise Server Collaboration Service Allows Privilege Escalation CVE-2026-11423 9.4 CriticalJune 5, 2026
• altium enterprise server, on-prem enterprise server +1 more Path Traversal in Altium Enterprise Server NIS Allows Unauthenticated Arbitrary File Write and File Read CVE-2026-11420 10.0 CriticalJune 5, 2026
• altium enterprise server, on-prem enterprise server +1 more Path Traversal in Altium Enterprise Server Vault UploadController Allows Arbitrary File Write CVE-2026-11419 9.4 CriticalJune 5, 2026
• altium enterprise server, on-prem enterprise server +1 more Unauthenticated File Exfiltration in Altium Enterprise Server Vault Service via Hard-coded Cryptographic Key and Path Traversal CVE-2026-11414 10.0 CriticalJune 5, 2026
• altium 365 Unauthenticated SOAP Endpoint in Altium 365 SearchService Allows Cross-Tenant Data Exfiltration and Index Destruction CVE-2026-9152 10.0 CriticalMay 21, 2026
• altium enterprise server Path Traversal in Altium Enterprise Server Viewer StorageController Allows Arbitrary File Read CVE-2026-9129 9.4 CriticalMay 20, 2026
• altium enterprise server Path Traversal in Altium Enterprise Server ComparisonService Allows Arbitrary File Write CVE-2026-9102 9.4 CriticalMay 20, 2026
• altium aes, on-prem enterprise server +1 more HTML Injection Leading to Script Execution in Altium Enterprise Server CVE-2025-27380 7.6 HighJanuary 22, 2026
• altium aes, on-prem enterprise server +1 more Stored Cross-Site Scripting in AES BOM Viewer CVE-2025-27379 6.8 MediumJanuary 22, 2026
• altium aes, on-prem enterprise server +1 more SQL Injection in AES Due to Inactive SQL Parsing Configuration CVE-2025-27378 8.6 HighJanuary 22, 2026
• altium designer Missing Validation of Self-Signed Certificates in Altium Designer Allows Man-in-the-Middle Attacks CVE-2025-27377 5.3 MediumJanuary 22, 2026
• altium 365 Altium 365 Over-Permissive CORS Configuration Allows Credentialed Cross-Origin Workspace Access CVE-2026-1181 9.0 CriticalJanuary 19, 2026
• altium live Stored Cross-Site Scripting in Altium Live Support Center Comment Endpoint CVE-2026-1011 6.1 MediumJanuary 15, 2026
• altium enterprise server, on-prem enterprise server +1 more Stored Cross-Site Scripting in Altium Enterprise Server Workflow Engine Allows Privilege Escalation CVE-2026-1010 Public exploit 8.0 HighJanuary 15, 2026
• altium live Stored Cross-Site Scripting in Altium Live Forum Leading to Cross-Customer Data Exposure CVE-2026-1009 9.0 CriticalJanuary 15, 2026
• altium live Stored Cross-Site Scripting in Altium Live User Profile Fields CVE-2026-1008 7.6 HighJanuary 15, 2026