Platform

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. runZero search SQL injectionCVE-2026-110265runZero · CVSS 6.5 · 0.3% likely

   CWE-89

2. runZero MCP 'Findings summaries' Data LeakCVE-2026-81846runZero · CVSS 3.5 · 0.3% likely

   CWE-639

3. runZero Platform superuser privilege escalationCVE-2026-5373runZero · CVSS 8.1 · 0.2% likely

   CWE-269

4. runZero Platform incorrect credential scopeCVE-2026-5384runZero · CVSS 5.8 · 0.2% likely

   CWE-863

5. runZero Platform session timeout failureCVE-2026-5376runZero · CVSS 5.9 · 0.2% likely

   CWE-613

6. runZero Platform MCP information leakCVE-2026-5374runZero · CVSS 5.8 · 0.2% likely

   CWE-863

7. runZero Platform SQL injection in saved queriesCVE-2026-5372runZero · CVSS 6.4 · 0.2% likely

   CWE-89

8. runZero Platform API credential information leakCVE-2026-5375runZero · CVSS 2.7 · 0.2% likely

   CWE-200

9. runZero Platform cleartext secret exposureCVE-2026-5380runZero · CVSS 5.3 · 0.2% likely

   CWE-863

10. runZero Platform user creation leakCVE-2026-5378runZero · CVSS 5.8 · 0.2% likely

    CWE-863

11. runZero Platform MCP endpoint information leakCVE-2026-5382runZero · CVSS 3 · 0.2% likely

    CWE-863

12. runZero Platform task information leakCVE-2026-5381runZero · CVSS 2.2 · 0.2% likely

    CWE-863

13. runZero Platform dashboard configuration exposureCVE-2026-7778runZero · CVSS 5 · 0.2% likely

    CWE-269

14. runZero Platform MCP certification information leakCVE-2026-5379runZero · CVSS 3 · 0.1% likely

    CWE-863

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.