Cern vulnerabilities

Products

• Indico 11
• Rucio 8
• White Rabbit Switch 2

Newest

• cern rucio Rucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata database CVE-2026-29090 Fix available 9.0 CriticalMay 6, 2026
• cern rucio Rucio SQL Injection in FilterEngine Oracle JSON Path via DID Search API CVE-2026-29080 Fix available 9.4 CriticalMay 6, 2026
• cern indico Indico discloses local files resulting in Remote Code Execution through LaTeX injection CVE-2026-33046 Fix available 7.7 HighMarch 23, 2026
• cern indico Indico missing access check in event series management API CVE-2026-28352 Fix available 6.5 MediumFebruary 27, 2026
• cern rucio Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute CVE-2026-25736 Fix available 6.1 MediumFebruary 25, 2026
• cern rucio Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name CVE-2026-25735 Fix available 6.1 MediumFebruary 25, 2026
• cern rucio Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata CVE-2026-25734 Fix available 6.1 MediumFebruary 25, 2026
• cern rucio Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function CVE-2026-25733 Fix available 7.3 HighFebruary 25, 2026
• cern rucio Rucio WebUI has Username Enumeration via Login Error Message CVE-2026-25138 Fix available 5.3 MediumFebruary 25, 2026
• cern rucio Rucio WebUI has a Reflected Cross-site Scripting Vulnerability CVE-2026-25136 Fix available 8.1 HighFebruary 25, 2026
• cern indico Indico affected by Cross-Site-Scripting via material uploads CVE-2026-25739 Fix available 5.4 MediumFebruary 17, 2026
• cern indico Indico has Server-Side Request Forgery (SSRF) in multiple places CVE-2026-25738 Fix available 6.9 MediumFebruary 17, 2026
• cern indico Indico vulnerable to Cross-Site Scripting via LaTeX math code CVE-2025-59035 Fix available 4.6 MediumSeptember 10, 2025
• cern indico Indico may disclose unauthorized user details access via legacy API CVE-2025-59034 Fix available 4.3 MediumSeptember 10, 2025
• cern indico Indico vulnerable to user enumeration via API endpoint CVE-2025-53640 Public exploitFix available 5.3 MediumJuly 14, 2025
• cern indico Indico Insecure Access CVE-2024-50633 Public exploitFix availableDisputed 0.0 NoneJanuary 16, 2025
• cern indico Indico has a Cross-Site-Scripting during account creation CVE-2024-45399 Fix available 4.3 MediumSeptember 4, 2024
• cern indico Cross-Site-Scripting via confirmation prompts CVE-2023-37901 Fix available 5.4 MediumJuly 21, 2023
• cern white rabbit switch, home.cern white rabbit switch firmware +1 more White Rabbit Switch - Unauthenticated remote code execution CVE-2023-22581 9.8 CriticalApril 24, 2023
• cern white rabbit switch, home.cern white rabbit switch firmware +1 more White Rabbit Switch - Password Disclosure Vulnerability CVE-2023-22577 9.8 CriticalApril 24, 2023
• cern indico Indico Tampering with links (e.g. password reset) in sent emails CVE-2021-30185 Fix available 7.5 HighApril 7, 2021
• cern root ROOT version 6.9.03 and below is vulnerable to an authenticated shell metacharacter injection in... CVE-2017-1000203 Fix available 8.8 HighNovember 17, 2017