Affected version lines
Known vulnerabilities
| CVE | Title | Affected versions | CVSS | Exploited | EPSS | Published |
|---|---|---|---|---|---|---|
| CVE-2026-63663 | CloudBeaver: Path Traversal in updateResultsDataBatch Allows Unauthorized Server File Stream Access | * | 6.5 | — | 2026-11-07 | |
| CVE-2026-63664 | CloudBeaver: Authorization Bypass (BFLA) - Data Export Restriction Bypass | * | 6.5 | — | 2026-11-07 | |
| CVE-2026-55449 | CloudBeaver: Path Traversal in Resource Manager getProjectPath allows directory enumeration outside shared-pro... | * | 5.3 | — | 2026-11-07 | |
| CVE-2026-108745 | CloudBeaver through 25.3.5 Missing Authorization via /api/sql-result-value Servlet | ≤ 25.3.5 | 2.3 | — | 2026-10-11 | |
| CVE-2026-108742 | CloudBeaver through 25.3.5 Missing Authorization via initConnection GraphQL Mutation | ≤ 25.3.5 | 5.3 | — | 2026-10-11 |
Track these versions on your own servers
InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.
Data: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (see EPSS at https://www.first.org/epss), endoflife.date. Software list: awesome-selfhosted (CC BY-SA 3.0).