Technology · Runzero
Runzero Platform vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 13 vulnerabilities in Runzero Platform: 0 in the last 7 days and 1 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-110265, was published on 3 November 2026. 1 vulnerability in the last four weeks, up from none in the four before.
- Last 7 days
- 0
- Last 90 days
- 1
- Critical, all time
- 0
- Exploited in the wild
- 0
About Runzero Platform
Asset discovery and network inventory platform for identifying and managing connected devices.
Latest Runzero Platform vulnerabilities
- CVE-2026-110265: runZero Platform information disclosure via malformed search querymediumCVSS 6.5
- CVE-2026-5384: An issue that could allow a credential to be updated and used for a task from outside of the authorized organization…mediumCVSS 5.8EPSS 0.2%
- CVE-2026-5383: An issue that could allow access to Explorer groups from outside of the authorized organization scope has been…mediumCVSS 4.4EPSS 0.2%
- CVE-2026-5382: An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been…lowCVSS 3EPSS 0.2%
- CVE-2026-5381: An issue that could expose task information outside of the authorized organization scope has been resolved. This is an…lowCVSS 2.2EPSS 0.2%
- CVE-2026-5380: An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and…mediumCVSS 5.3EPSS 0.2%
- CVE-2026-5379: An issue that allowed MCP agents to access certificate information from outside of their authorized organization scope…lowCVSS 3EPSS 0.1%
- CVE-2026-5378: An issue that allowed administrators to create and update users outside of their authorized organization scope has…mediumCVSS 5.8EPSS 0.2%
- CVE-2026-5376: An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been…mediumCVSS 5.9EPSS 0.2%
- CVE-2026-5375: An issue that could allow a user with access to a credential to view sensitive fields through an API response has been…lowCVSS 2.7EPSS 0.2%
- CVE-2026-5374: An issue that allowed MCP agents to access remediation and asset information from outside of the authorized…mediumCVSS 5.8EPSS 0.2%
- CVE-2026-5373: An issue that allowed all-organization administrators to promote accounts to superuser status has been resolved. This…highCVSS 8.1EPSS 0.2%
- CVE-2026-5372: An issue that allowed a SQL injection attack vector related to saved queries (introduced in version 4.0.260123.0)…mediumCVSS 6.4EPSS 0.2%
Most severe Runzero Platform vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-5373: An issue that allowed all-organization administrators to promote accounts to superuser status has been resolved. This…highCVSS 8.1EPSS 0.2%
- CVE-2026-110265: runZero Platform information disclosure via malformed search querymediumCVSS 6.5
- CVE-2026-5372: An issue that allowed a SQL injection attack vector related to saved queries (introduced in version 4.0.260123.0)…mediumCVSS 6.4EPSS 0.2%
- CVE-2026-5376: An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been…mediumCVSS 5.9EPSS 0.2%
- CVE-2026-5384: An issue that could allow a credential to be updated and used for a task from outside of the authorized organization…mediumCVSS 5.8EPSS 0.2%
- CVE-2026-5374: An issue that allowed MCP agents to access remediation and asset information from outside of the authorized…mediumCVSS 5.8EPSS 0.2%
- CVE-2026-5378: An issue that allowed administrators to create and update users outside of their authorized organization scope has…mediumCVSS 5.8EPSS 0.2%
- CVE-2026-5380: An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and…mediumCVSS 5.3EPSS 0.2%
- CVE-2026-5383: An issue that could allow access to Explorer groups from outside of the authorized organization scope has been…mediumCVSS 4.4EPSS 0.2%
- CVE-2026-5382: An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been…lowCVSS 3EPSS 0.2%
Vulnerabilities per week
1 vulnerability in the last four weeks, up from none in the four before. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 1 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Runzero Platform vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/runzero-platform)<a href="https://junglewise.ai/threats/technologies/runzero-platform"><img src="https://junglewise.ai/threats/technologies/runzero-platform/badge.svg" alt="Runzero Platform vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/runzero-platform.json, and this page as text at https://junglewise.ai/threats/technologies/runzero-platform.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Runzero Platform vulnerabilities", https://junglewise.ai/threats/technologies/runzero-platform, 11 November 2026.