Tribulant Software
Vulnerability activity for Tribulant Software: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 3
- Critical (CVSS 9+)
- 3
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 3
- Critical (CVSS 9+)
- 3
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 5
- Critical (CVSS 9+)
- 3
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 9.6CriticalOct 27, 2026Tribulant Software Newsletters CSRFCVE-2026-116863Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site Request Forgery.This issue affects Newsletters: from n/a through 4.18.2.
- 9.8CriticalOct 24, 2026Tribulant Software Newsletters DeserializationCVE-2026-94075Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection.This issue affects Newsletters: from n/a through 4.18.1.
- 9.3CriticalOct 24, 2026Tribulant Software Newsletters SQL injectionCVE-2026-111402Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters newsletters-lite allows SQL Injection.This issue affects Newsletters: from n/a through 4.18.1.
- 8.1HighJun 26, 2026Tribulant Software Newsletters Auth bypass / access controlCVE-2026-57645newsletters_subscribers Broken Access Control in Newsletters <= 4.13 versions.
- 7.3HighJun 26, 2026Tribulant Software Newsletters Auth bypass / access controlCVE-2026-54840Unauthenticated Broken Access Control in Newsletters <= 4.13 versions.
Top products
- Newsletters5 CVEs in the last year, 3 critical
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.