Rocket Chat

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-22560 Monitor

An open redirect vulnerability in Rocket.Chat versions prior to 8.4.0 allows users to be redirected to arbitrary URLs by manipulating parameters within a SAML endpoint.

Rocket.Chat Open Redirect Rocket Chat

NVD GitHub VulDB

EPSS

0.0%

CVE-2025-7974 HIGH This Month

rocket.chat Incorrect Authorization Information Disclosure Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Information Disclosure Rocket Chat

NVD

CVSS 3.1

7.5

EPSS

0.1%

CVE-2026-22560

EPSS 0%

Monitor

An open redirect vulnerability in Rocket.Chat versions prior to 8.4.0 allows users to be redirected to arbitrary URLs by manipulating parameters within a SAML endpoint.

Rocket.Chat Open Redirect Rocket Chat

NVD GitHub VulDB

CVE-2025-7974

EPSS 0% CVSS 7.5

HIGH This Month

Authentication Bypass Information Disclosure Rocket Chat

NVD