Skip to contentNationalsecurityagency Emissary vulnerabilities
- nationalsecurityagency emissaryNationalSecurityAgency/emissary: Incomplete fix for CVE-2026-35571: SSRFCVE-2026-54442Fix available4.8 Medium
- nationalsecurityagency emissaryEmissary has a Path Traversal via Blacklist Bypass in Configuration APICVE-2026-35583Fix available5.3 Medium
- nationalsecurityagency emissaryEmissary has a Command Injection via PLACE_NAME Configuration in ExecutrixCVE-2026-35581Fix available7.2 High
- nationalsecurityagency emissaryEmissary has Stored XSS via Navigation Template Link InjectionCVE-2026-35571Fix available4.8 Medium
- nationalsecurityagency emissaryEmissary has GitHub Actions Shell Injection via Workflow InputsCVE-2026-35580Public exploitFix available9.1 Critical
- nationalsecurityagency emissaryEmissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in ExecutrixCVE-2026-35582Fix available8.8 High
- nationalsecurityagency emissaryEmissary Use of a Broken or Risky Cryptographic AlgorithmCVE-2025-27508Fix available7.5 High
- nationalsecurityagency emissaryServer-Side Request Forgery (SSRF) in emissary:emissaryCVE-2021-326397.2 High
- nationalsecurityagency emissaryPost-authentication Remote Code Execution (RCE) in emissary:emissaryCVE-2021-326478.0 High
- nationalsecurityagency emissaryDeserialization of Untrusted Data in EmissaryCVE-2021-326347.2 High