{"schema_version":1,"title":"Runzero Platform vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 13 vulnerabilities in Runzero Platform: 0 in the last 7 days and 1 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-110265, was published on 3 November 2026. 1 vulnerability in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/runzero-platform","json_url":"https://junglewise.ai/threats/technologies/runzero-platform.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/runzero-platform","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":1,"all_time":13,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":1,"last_90_days":1,"last_365_days":13},"latest":[{"cve":"CVE-2026-110265","cvss":6.5,"slug":"cve-2026-110265-a-specially-crafted-malformed-search-query-could-return-results","title":"runZero Platform information disclosure via malformed search query","severity":"medium","exploited":false,"published_at":"2026-11-03T15:17:23.297+00:00","url":"https://junglewise.ai/threats/cve-2026-110265-a-specially-crafted-malformed-search-query-could-return-results"},{"cve":"CVE-2026-5384","cvss":5.8,"epss":0.0021,"slug":"cve-2026-5384-an-issue-that-could-allow-a-credential-to-be-updated-and-used-for","title":"An issue that could allow a credential to be updated and used for a task from outside of the authorized organization…","severity":"medium","exploited":false,"published_at":"2026-04-07T15:17:48.72+00:00","url":"https://junglewise.ai/threats/cve-2026-5384-an-issue-that-could-allow-a-credential-to-be-updated-and-used-for"},{"cve":"CVE-2026-5383","cvss":4.4,"epss":0.0018,"slug":"cve-2026-5383-an-issue-that-could-allow-access-to-explorer-groups-from-outside","title":"An issue that could allow access to Explorer groups from outside of the authorized organization scope has been…","severity":"medium","exploited":false,"published_at":"2026-04-07T15:17:48.543+00:00","url":"https://junglewise.ai/threats/cve-2026-5383-an-issue-that-could-allow-access-to-explorer-groups-from-outside"},{"cve":"CVE-2026-5382","cvss":3,"epss":0.0017,"slug":"cve-2026-5382-an-issue-that-could-expose-records-outside-of-the-authorized","title":"An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been…","severity":"low","exploited":false,"published_at":"2026-04-07T15:17:48.39+00:00","url":"https://junglewise.ai/threats/cve-2026-5382-an-issue-that-could-expose-records-outside-of-the-authorized"},{"cve":"CVE-2026-5381","cvss":2.2,"epss":0.0017,"slug":"cve-2026-5381-an-issue-that-could-expose-task-information-outside-of-the","title":"An issue that could expose task information outside of the authorized organization scope has been resolved. This is an…","severity":"low","exploited":false,"published_at":"2026-04-07T15:17:48.23+00:00","url":"https://junglewise.ai/threats/cve-2026-5381-an-issue-that-could-expose-task-information-outside-of-the"},{"cve":"CVE-2026-5380","cvss":5.3,"epss":0.002,"slug":"cve-2026-5380-an-issue-that-could-allow-an-authorized-user-to-view-the-clear","title":"An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and…","severity":"medium","exploited":false,"published_at":"2026-04-07T15:17:48.07+00:00","url":"https://junglewise.ai/threats/cve-2026-5380-an-issue-that-could-allow-an-authorized-user-to-view-the-clear"},{"cve":"CVE-2026-5379","cvss":3,"epss":0.0012,"slug":"cve-2026-5379-an-issue-that-allowed-mcp-agents-to-access-certificate-information","title":"An issue that allowed MCP agents to access certificate information from outside of their authorized organization scope…","severity":"low","exploited":false,"published_at":"2026-04-07T15:17:47.917+00:00","url":"https://junglewise.ai/threats/cve-2026-5379-an-issue-that-allowed-mcp-agents-to-access-certificate-information"},{"cve":"CVE-2026-5378","cvss":5.8,"epss":0.0019,"slug":"cve-2026-5378-an-issue-that-allowed-administrators-to-create-and-update-users","title":"An issue that allowed administrators to create and update users outside of their authorized organization scope has…","severity":"medium","exploited":false,"published_at":"2026-04-07T15:17:47.763+00:00","url":"https://junglewise.ai/threats/cve-2026-5378-an-issue-that-allowed-administrators-to-create-and-update-users"},{"cve":"CVE-2026-5376","cvss":5.9,"epss":0.0021,"slug":"cve-2026-5376-an-issue-that-could-prevent-session-inactivity-timeouts-from","title":"An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been…","severity":"medium","exploited":false,"published_at":"2026-04-07T15:17:47.61+00:00","url":"https://junglewise.ai/threats/cve-2026-5376-an-issue-that-could-prevent-session-inactivity-timeouts-from"},{"cve":"CVE-2026-5375","cvss":2.7,"epss":0.002,"slug":"cve-2026-5375-an-issue-that-could-allow-a-user-with-access-to-a-credential-to","title":"An issue that could allow a user with access to a credential to view sensitive fields through an API response has been…","severity":"low","exploited":false,"published_at":"2026-04-07T15:17:47.46+00:00","url":"https://junglewise.ai/threats/cve-2026-5375-an-issue-that-could-allow-a-user-with-access-to-a-credential-to"},{"cve":"CVE-2026-5374","cvss":5.8,"epss":0.0021,"slug":"cve-2026-5374-an-issue-that-allowed-mcp-agents-to-access-remediation-and-asset","title":"An issue that allowed MCP agents to access remediation and asset information from outside of the authorized…","severity":"medium","exploited":false,"published_at":"2026-04-07T15:17:47.307+00:00","url":"https://junglewise.ai/threats/cve-2026-5374-an-issue-that-allowed-mcp-agents-to-access-remediation-and-asset"},{"cve":"CVE-2026-5373","cvss":8.1,"epss":0.0022,"slug":"cve-2026-5373-an-issue-that-allowed-all-organization-administrators-to-promote","title":"An issue that allowed all-organization administrators to promote accounts to superuser status has been resolved. This…","severity":"high","exploited":false,"published_at":"2026-04-07T15:17:47.14+00:00","url":"https://junglewise.ai/threats/cve-2026-5373-an-issue-that-allowed-all-organization-administrators-to-promote"},{"cve":"CVE-2026-5372","cvss":6.4,"epss":0.002,"slug":"cve-2026-5372-an-issue-that-allowed-a-sql-injection-attack-vector-related-to","title":"An issue that allowed a SQL injection attack vector related to saved queries (introduced in version 4.0.260123.0)…","severity":"medium","exploited":false,"published_at":"2026-04-07T15:17:46.973+00:00","url":"https://junglewise.ai/threats/cve-2026-5372-an-issue-that-allowed-a-sql-injection-attack-vector-related-to"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Runzero Platform","slug":"runzero-platform","vendor":{"hub":true,"name":"Runzero","slug":"runzero","url":"https://junglewise.ai/threats/vendors/runzero"},"aliases":[],"description":"Asset discovery and network inventory platform for identifying and managing connected devices.","url":"https://junglewise.ai/threats/technologies/runzero-platform"},"most_severe":[{"cve":"CVE-2026-5373","cvss":8.1,"epss":0.0022,"slug":"cve-2026-5373-an-issue-that-allowed-all-organization-administrators-to-promote","title":"An issue that allowed all-organization administrators to promote accounts to superuser status has been resolved. This…","severity":"high","exploited":false,"published_at":"2026-04-07T15:17:47.14+00:00","url":"https://junglewise.ai/threats/cve-2026-5373-an-issue-that-allowed-all-organization-administrators-to-promote"},{"cve":"CVE-2026-110265","cvss":6.5,"slug":"cve-2026-110265-a-specially-crafted-malformed-search-query-could-return-results","title":"runZero Platform information disclosure via malformed search query","severity":"medium","exploited":false,"published_at":"2026-11-03T15:17:23.297+00:00","url":"https://junglewise.ai/threats/cve-2026-110265-a-specially-crafted-malformed-search-query-could-return-results"},{"cve":"CVE-2026-5372","cvss":6.4,"epss":0.002,"slug":"cve-2026-5372-an-issue-that-allowed-a-sql-injection-attack-vector-related-to","title":"An issue that allowed a SQL injection attack vector related to saved queries (introduced in version 4.0.260123.0)…","severity":"medium","exploited":false,"published_at":"2026-04-07T15:17:46.973+00:00","url":"https://junglewise.ai/threats/cve-2026-5372-an-issue-that-allowed-a-sql-injection-attack-vector-related-to"},{"cve":"CVE-2026-5376","cvss":5.9,"epss":0.0021,"slug":"cve-2026-5376-an-issue-that-could-prevent-session-inactivity-timeouts-from","title":"An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been…","severity":"medium","exploited":false,"published_at":"2026-04-07T15:17:47.61+00:00","url":"https://junglewise.ai/threats/cve-2026-5376-an-issue-that-could-prevent-session-inactivity-timeouts-from"},{"cve":"CVE-2026-5384","cvss":5.8,"epss":0.0021,"slug":"cve-2026-5384-an-issue-that-could-allow-a-credential-to-be-updated-and-used-for","title":"An issue that could allow a credential to be updated and used for a task from outside of the authorized organization…","severity":"medium","exploited":false,"published_at":"2026-04-07T15:17:48.72+00:00","url":"https://junglewise.ai/threats/cve-2026-5384-an-issue-that-could-allow-a-credential-to-be-updated-and-used-for"},{"cve":"CVE-2026-5374","cvss":5.8,"epss":0.0021,"slug":"cve-2026-5374-an-issue-that-allowed-mcp-agents-to-access-remediation-and-asset","title":"An issue that allowed MCP agents to access remediation and asset information from outside of the authorized…","severity":"medium","exploited":false,"published_at":"2026-04-07T15:17:47.307+00:00","url":"https://junglewise.ai/threats/cve-2026-5374-an-issue-that-allowed-mcp-agents-to-access-remediation-and-asset"},{"cve":"CVE-2026-5378","cvss":5.8,"epss":0.0019,"slug":"cve-2026-5378-an-issue-that-allowed-administrators-to-create-and-update-users","title":"An issue that allowed administrators to create and update users outside of their authorized organization scope has…","severity":"medium","exploited":false,"published_at":"2026-04-07T15:17:47.763+00:00","url":"https://junglewise.ai/threats/cve-2026-5378-an-issue-that-allowed-administrators-to-create-and-update-users"},{"cve":"CVE-2026-5380","cvss":5.3,"epss":0.002,"slug":"cve-2026-5380-an-issue-that-could-allow-an-authorized-user-to-view-the-clear","title":"An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and…","severity":"medium","exploited":false,"published_at":"2026-04-07T15:17:48.07+00:00","url":"https://junglewise.ai/threats/cve-2026-5380-an-issue-that-could-allow-an-authorized-user-to-view-the-clear"},{"cve":"CVE-2026-5383","cvss":4.4,"epss":0.0018,"slug":"cve-2026-5383-an-issue-that-could-allow-access-to-explorer-groups-from-outside","title":"An issue that could allow access to Explorer groups from outside of the authorized organization scope has been…","severity":"medium","exploited":false,"published_at":"2026-04-07T15:17:48.543+00:00","url":"https://junglewise.ai/threats/cve-2026-5383-an-issue-that-could-allow-access-to-explorer-groups-from-outside"},{"cve":"CVE-2026-5382","cvss":3,"epss":0.0017,"slug":"cve-2026-5382-an-issue-that-could-expose-records-outside-of-the-authorized","title":"An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been…","severity":"low","exploited":false,"published_at":"2026-04-07T15:17:48.39+00:00","url":"https://junglewise.ai/threats/cve-2026-5382-an-issue-that-could-expose-records-outside-of-the-authorized"}],"generated_at":"2026-11-11T03:07:00.183524+00:00"}