Nsa Emissary vulnerabilities

• nationalsecurityagency emissary Emissary has a Path Traversal via Blacklist Bypass in Configuration API CVE-2026-35583 Fix available 5.3 MediumApril 7, 2026
• nationalsecurityagency emissary Emissary has a Command Injection via PLACE_NAME Configuration in Executrix CVE-2026-35581 Fix available 7.2 HighApril 7, 2026
• nationalsecurityagency emissary Emissary has Stored XSS via Navigation Template Link Injection CVE-2026-35571 Fix available 4.8 MediumApril 7, 2026
• nationalsecurityagency emissary Emissary has GitHub Actions Shell Injection via Workflow Inputs CVE-2026-35580 Public exploitFix available 9.1 CriticalApril 6, 2026
• nationalsecurityagency emissary Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix CVE-2026-35582 Fix available 8.8 HighApril 3, 2026
• nationalsecurityagency emissary Server-Side Request Forgery (SSRF) in emissary:emissary CVE-2021-32639 7.2 HighJuly 2, 2021
• nationalsecurityagency emissary Post-authentication Remote Code Execution (RCE) in emissary:emissary CVE-2021-32647 8.0 HighMay 28, 2021
• nationalsecurityagency emissary Deserialization of Untrusted Data in Emissary CVE-2021-32634 7.2 HighMay 21, 2021
• nsa emissary A Cross-site scripting (XSS) vulnerability in the DocumentAction component of U.S. National... CVE-2021-32092 6.1 MediumMay 7, 2021
• nsa emissary The ConfigFileAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows an... CVE-2021-32093 6.5 MediumMay 7, 2021
• nsa emissary U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to upload... CVE-2021-32094 8.8 HighMay 7, 2021
• nsa emissary U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to delete... CVE-2021-32095 8.1 HighMay 7, 2021
• nsa emissary The ConsoleAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows a CSRF... CVE-2021-32096 8.8 HighMay 7, 2021