SABBATIC
Vulnerability activity for SABBATIC: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 5
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 5
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 5
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 4.8MediumOct 29, 2026SABBATIC app CSRFCVE-2026-5702Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application that allows an attacker can trick an authenticated user into clicking a malicious link or loading a page that sends unauthorized requests to a vulnerable endpoint.
- 4.8MediumOct 29, 2026SABBATIC app XSSCVE-2026-5700Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'observaciones' in /mis-gastos endpoint.
- 4.8MediumOct 29, 2026SABBATIC app XSSCVE-2026-5699Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'companyName' in /empresa endpoint;
- 4.8MediumOct 29, 2026SABBATIC app XSSCVE-2026-5698Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameters 'titulo_es' and 'add_etiquetas%5B%5D' in '/categorías' endpoint;
- 4.8MediumOct 29, 2026SABBATIC app XSSCVE-2026-5697Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'nombre' in '/usuario' endpoint;
Top products
- SABBATIC app5 CVEs in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- ENISA EUVD · Oct 29, 2026EUVD-2026-112743 · Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application that allows an attacker can trick…CVE-2026-5702
- ENISA EUVD · Oct 29, 2026EUVD-2026-112742 · Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store…CVE-2026-5700
- ENISA EUVD · Oct 29, 2026EUVD-2026-112741 · Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store…CVE-2026-5699
- ENISA EUVD · Oct 29, 2026EUVD-2026-112740 · Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store…CVE-2026-5698
- ENISA EUVD · Oct 29, 2026EUVD-2026-112739 · Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store…CVE-2026-5697
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.