{"schema_version":1,"title":"RansomLook vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 9 vulnerabilities in RansomLook: 0 in the last 7 days and 9 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-78555, was published on 24 August 2026. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/ransomlook","json_url":"https://junglewise.ai/threats/vendors/ransomlook.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/ransomlook","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":0,"all_time":9,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":9,"last_365_days":9},"latest":[{"cve":"CVE-2026-78555","cvss":0,"epss":0.0042,"slug":"cve-2026-78555-ransomlook-api-key-exposure-in-html-source","title":"RansomLook API key exposure in HTML source","severity":"info","exploited":false,"published_at":"2026-08-24T20:17:24.85+00:00","url":"https://junglewise.ai/threats/cve-2026-78555-ransomlook-api-key-exposure-in-html-source"},{"cve":"CVE-2026-78553","epss":0.002,"slug":"cve-2026-78553-ransomlook-insecure-flask-session-key-file-permissions","title":"RansomLook insecure Flask session key file permissions","severity":"info","exploited":false,"published_at":"2026-08-24T20:17:24.383+00:00","url":"https://junglewise.ai/threats/cve-2026-78553-ransomlook-insecure-flask-session-key-file-permissions"},{"cve":"CVE-2026-78551","epss":0.0065,"slug":"cve-2026-78551-ransomlook-authentication-endpoint-enumeration-and-dos","title":"RansomLook authentication endpoint enumeration and DoS","severity":"info","exploited":false,"published_at":"2026-08-24T20:17:23.927+00:00","url":"https://junglewise.ai/threats/cve-2026-78551-ransomlook-authentication-endpoint-enumeration-and-dos"},{"cve":"CVE-2026-78386","epss":0.008,"slug":"cve-2026-78386-ransomlook-api-information-disclosure-via-unauthenticated","title":"RansomLook API information disclosure via unauthenticated location records","severity":"info","exploited":false,"published_at":"2026-08-24T14:17:06.09+00:00","url":"https://junglewise.ai/threats/cve-2026-78386-ransomlook-api-information-disclosure-via-unauthenticated"},{"cve":"CVE-2026-78385","cvss":6.5,"epss":0.0041,"slug":"cve-2026-78385-ransomlook-insufficient-resource-validation-in-pdf-generation","title":"RansomLook insufficient resource validation in PDF generation","severity":"info","exploited":false,"published_at":"2026-08-24T14:17:05.94+00:00","url":"https://junglewise.ai/threats/cve-2026-78385-ransomlook-insufficient-resource-validation-in-pdf-generation"},{"cve":"CVE-2026-78378","epss":0.0045,"slug":"cve-2026-78378-ransomlook-redis-glob-pattern-injection","title":"RansomLook Redis glob pattern injection","severity":"info","exploited":false,"published_at":"2026-08-24T14:17:05.533+00:00","url":"https://junglewise.ai/threats/cve-2026-78378-ransomlook-redis-glob-pattern-injection"},{"cve":"CVE-2026-78372","cvss":5.3,"epss":0.0067,"slug":"cve-2026-78372-ransomlook-authorization-bypass-in-private-entities","title":"RansomLook authorization bypass in private entities","severity":"info","exploited":false,"published_at":"2026-08-24T14:17:05.26+00:00","url":"https://junglewise.ai/threats/cve-2026-78372-ransomlook-authorization-bypass-in-private-entities"},{"cve":"CVE-2026-78370","cvss":5.3,"epss":0.0069,"slug":"cve-2026-78370-ransomlook-authorization-bypass-in-database-export-endpoint","title":"RansomLook authorization bypass in database export endpoint","severity":"info","exploited":false,"published_at":"2026-08-24T14:17:05.1+00:00","url":"https://junglewise.ai/threats/cve-2026-78370-ransomlook-authorization-bypass-in-database-export-endpoint"},{"cve":"CVE-2026-78369","cvss":0,"epss":0.0069,"slug":"cve-2026-78369-ransomlook-missing-authentication-in-admin-crypto-group-new","title":"RansomLook missing authentication in /admin/crypto/group/new","severity":"info","exploited":false,"published_at":"2026-08-24T14:17:04.91+00:00","url":"https://junglewise.ai/threats/cve-2026-78369-ransomlook-missing-authentication-in-admin-crypto-group-new"}],"vendor":{"hub":true,"name":"RansomLook","slug":"ransomlook","url":"https://junglewise.ai/threats/vendors/ransomlook"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":9},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-78385","cvss":6.5,"epss":0.0041,"slug":"cve-2026-78385-ransomlook-insufficient-resource-validation-in-pdf-generation","title":"RansomLook insufficient resource validation in PDF generation","severity":"info","exploited":false,"published_at":"2026-08-24T14:17:05.94+00:00","url":"https://junglewise.ai/threats/cve-2026-78385-ransomlook-insufficient-resource-validation-in-pdf-generation"},{"cve":"CVE-2026-78370","cvss":5.3,"epss":0.0069,"slug":"cve-2026-78370-ransomlook-authorization-bypass-in-database-export-endpoint","title":"RansomLook authorization bypass in database export endpoint","severity":"info","exploited":false,"published_at":"2026-08-24T14:17:05.1+00:00","url":"https://junglewise.ai/threats/cve-2026-78370-ransomlook-authorization-bypass-in-database-export-endpoint"},{"cve":"CVE-2026-78372","cvss":5.3,"epss":0.0067,"slug":"cve-2026-78372-ransomlook-authorization-bypass-in-private-entities","title":"RansomLook authorization bypass in private entities","severity":"info","exploited":false,"published_at":"2026-08-24T14:17:05.26+00:00","url":"https://junglewise.ai/threats/cve-2026-78372-ransomlook-authorization-bypass-in-private-entities"},{"cve":"CVE-2026-78369","cvss":0,"epss":0.0069,"slug":"cve-2026-78369-ransomlook-missing-authentication-in-admin-crypto-group-new","title":"RansomLook missing authentication in /admin/crypto/group/new","severity":"info","exploited":false,"published_at":"2026-08-24T14:17:04.91+00:00","url":"https://junglewise.ai/threats/cve-2026-78369-ransomlook-missing-authentication-in-admin-crypto-group-new"},{"cve":"CVE-2026-78555","cvss":0,"epss":0.0042,"slug":"cve-2026-78555-ransomlook-api-key-exposure-in-html-source","title":"RansomLook API key exposure in HTML source","severity":"info","exploited":false,"published_at":"2026-08-24T20:17:24.85+00:00","url":"https://junglewise.ai/threats/cve-2026-78555-ransomlook-api-key-exposure-in-html-source"},{"cve":"CVE-2026-78386","epss":0.008,"slug":"cve-2026-78386-ransomlook-api-information-disclosure-via-unauthenticated","title":"RansomLook API information disclosure via unauthenticated location records","severity":"info","exploited":false,"published_at":"2026-08-24T14:17:06.09+00:00","url":"https://junglewise.ai/threats/cve-2026-78386-ransomlook-api-information-disclosure-via-unauthenticated"},{"cve":"CVE-2026-78551","epss":0.0065,"slug":"cve-2026-78551-ransomlook-authentication-endpoint-enumeration-and-dos","title":"RansomLook authentication endpoint enumeration and DoS","severity":"info","exploited":false,"published_at":"2026-08-24T20:17:23.927+00:00","url":"https://junglewise.ai/threats/cve-2026-78551-ransomlook-authentication-endpoint-enumeration-and-dos"},{"cve":"CVE-2026-78378","epss":0.0045,"slug":"cve-2026-78378-ransomlook-redis-glob-pattern-injection","title":"RansomLook Redis glob pattern injection","severity":"info","exploited":false,"published_at":"2026-08-24T14:17:05.533+00:00","url":"https://junglewise.ai/threats/cve-2026-78378-ransomlook-redis-glob-pattern-injection"},{"cve":"CVE-2026-78553","epss":0.002,"slug":"cve-2026-78553-ransomlook-insecure-flask-session-key-file-permissions","title":"RansomLook insecure Flask session key file permissions","severity":"info","exploited":false,"published_at":"2026-08-24T20:17:24.383+00:00","url":"https://junglewise.ai/threats/cve-2026-78553-ransomlook-insecure-flask-session-key-file-permissions"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"RansomLook","slug":"ransomlook","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/ransomlook"}]}