Strangebee Thehive vulnerabilities

• strangebee thehive TheHive 4.1.24 Broken Object Level Authorization via Attachment Download Endpoints CVE-2026-63099 7.1 HighJuly 17, 2026
• strangebee thehive TheHive 4.1.24 Unauthenticated Information Disclosure via /api/status Endpoint CVE-2026-63098 6.9 MediumJuly 17, 2026
• strangebee thehive A Broken Access Control vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3... CVE-2025-48741 6.8 MediumMay 23, 2025
• strangebee thehive A Cross-Site Request Forgery (CSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3... CVE-2025-48740 5.9 MediumMay 23, 2025
• strangebee thehive A Server-Side Request Forgery (SSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3... CVE-2025-48739 4.6 MediumMay 23, 2025
• strangebee thehive An e-mail flooding vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11,... CVE-2025-48738 6.9 MediumMay 23, 2025
• strangebee thehive StrangeBee TheHive 5.2.0 to 5.2.8 is vulnerable to Cross Site Scripting (XSS) in the case... CVE-2024-22877 5.4 MediumJanuary 19, 2024
• strangebee thehive StrangeBee TheHive 5.1.0 to 5.1.9 and 5.2.0 to 5.2.8 is vulnerable to Cross Site Scripting (XSS)... CVE-2024-22876 5.4 MediumJanuary 19, 2024
• strangebee cortex, thehive +1 more An issue in StrangeBee TheHive v.5.0.8, v.4.1.21 and Cortex v.3.1.6 allows a remote attacker to... CVE-2023-39069 9.8 CriticalSeptember 11, 2023
• strangebee thehive An improper authorization check in the User API in TheHive before 2.13.4 and 3.x before 3.3.1... CVE-2017-18376 8.8 HighJune 2, 2019