Skip to main content

Slack

3 CVEs product

Monthly

CVE-2026-25793 Feb 06, 23:15 Go HIGH PATCH This Week

Nebula is a scalable overlay networking tool. [CVSS 8.1 HIGH]

Information Disclosure Red Hat Nebula Slack Suse
NVD GitHub VulDB
CVSS 3.1
8.1
EPSS
0.0%
CVE-2020-11498 Apr 02, 23:15 HIGH POC PATCH This Week

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tun_darwin.go or tun_windows.go. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

RCE Path Traversal Nebula Slack
NVD GitHub
CVSS 3.1
8.8
EPSS
3.4%
CVE-2019-14366 Nov 12, 21:15 HIGH This Week

WP SlackSync plugin through 1.8.5 for WordPress leaks a Slack Access Token in source code. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Information Disclosure Slack Wp Slacksync
NVD GitHub
CVSS 3.1
7.5
EPSS
1.7%
EPSS 0% CVSS 8.1
HIGH PATCH This Week

Nebula is a scalable overlay networking tool. [CVSS 8.1 HIGH]

Information Disclosure Red Hat Nebula +2
NVD GitHub VulDB
EPSS 3% CVSS 8.8
HIGH POC PATCH This Week

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tun_darwin.go or tun_windows.go. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

RCE Path Traversal Nebula +1
NVD GitHub
EPSS 2% CVSS 7.5
HIGH This Week

WP SlackSync plugin through 1.8.5 for WordPress leaks a Slack Access Token in source code. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Information Disclosure Slack +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy