CVE-2026-5378
Incorrect authorization in Runzero Platform
CVSS score
6.8
EPSS probability
%0.2
Risk score
0.0
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
CVE-2026-53787 Amasty Order Attribute (AOA) file upload exploit, modified to support the upload of HTML files instead of TXT files.
Makefile Go / Python
Similar Vulnerabilities
8.4
CVE-2026-5373Improper privilege management in Runzero Platform
Patch status unknownEPSS %0
6.4
CVE-2026-5372SQL injection in Runzero Platform
Patch status unknownEPSS %0
5.9
CVE-2026-5376Vulnerability in Runzero Platform
Patch status unknownEPSS %0
5.8
CVE-2026-5384Incorrect authorization in Runzero Platform
Patch status unknownEPSS %0
5.8
CVE-2026-5374Incorrect authorization in Runzero Platform
Patch status unknownEPSS %0
5.3
CVE-2026-5380Incorrect authorization in Runzero Platform
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-5378"