Vulnerabilities in semaphoreui

4 results

CVE-2026-73294CRITICALSemaphore U: OS Command InjectionEPSS 0.7%CVE-2026-73293HIGHSemaphore UI: Manager-to-owner privilege escalation via custom-role slug collisionEPSS 0.6%CVE-2026-91994HIGHSemaphore UI through 2.19.12 Missing Authorization on GET and HEAD RequestsEPSS 0.4%CVE-2026-73292HIGHSemaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmationEPSS 0.2%