Known vulnerabilities in emissary

Vendor: National Security Agency
Software: emissary
Software CPE: cpe:2.3:a:nsa.gov:emissary:*:*:*:*:*:*:*:*
Website: https://www.nsa.gov/
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting emissary emissary is affected by 9 known vulnerabilities: 2 medium, 7 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125818 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-35582		 CWE-78 Low
No
No
 8.43.0 11.04.2026 SB2026041114
#VU125046 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-35583		 CWE-22 Medium
No
No
 8.39.0 07.04.2026 SB2026040797
#VU125045 - Command injection
CVE-2026-35581		 CWE-77 Low
No
No
 8.39.0 07.04.2026 SB2026040797
#VU125044 - Command injection
CVE-2026-35580		 CWE-77 Low
No
No
 8.39.0 07.04.2026 SB2026040797
#VU125043 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-35571		 CWE-79 Low
No
No
 8.39.0 07.04.2026 SB2026040797
#VU125042 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2025-27508		 CWE-327 Medium
No
No
 8.24.0 05.03.2025 SB2025030560
#VU125040 - Server-Side Request Forgery (SSRF)
CVE-2021-32639		 CWE-918 Low
No
No
 7.0.0 02.07.2021 SB2021060709
#VU53839 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-32647		 CWE-94 Low
No
No
 7.0.0 07.06.2021 SB2021060709
#VU125041 - Deserialization of Untrusted Data
CVE-2021-32634		 CWE-502 Low
No
No
 6.6.0 21.05.2021 SB2021052127