Known vulnerabilities in Zulip Server 7.0-beta3

Vendor: Zulip
Software: Zulip Server
Version: 7.0-beta3
Software CPE: cpe:2.3:a:zulip:zulip_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Zulip Server version 7.0-beta3 Zulip Server 7.0-beta3 is affected by 12 vulnerabilities: 3 medium, 9 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141414 - Improper Access Control
CWE-284 Low
No
No
12.2 11.08.2026 SB2026081129
#VU141413 - Improper input validation
CWE-20 Low
No
No
12.2 11.08.2026 SB2026081129
#VU141412 - Improper Authentication
CWE-287 Low
No
No
12.2 11.08.2026 SB2026081129
#VU124765 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-26058
CWE-22 Medium
No
No
- 01.04.2026 SB2026040146
#VU122423 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-24050
CWE-79 Low
No
No
11.5 06.02.2026 SB2026020612
#VU112981 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-52559
CWE-79 Low
No
No
10.4 16.07.2025 SB20250716105
#VU106255 - Authorization Bypass Through User-Controlled SQL Primary Key
CVE-2025-30369
CWE-566 Low
No
No
10.1 31.03.2025 SB2025033108
#VU106254 - Exposure of sensitive information to an unauthorized actor
CVE-2025-27149
CWE-200 Low
No
No
10.0 31.03.2025 SB2025033107
#VU102877 - Exposure of sensitive information to an unauthorized actor
CVE-2024-56136
CWE-200 Medium
No
No
9.4 17.01.2025 SB2025011708
#VU87651 - Improper Access Control
CVE-2024-27286
CWE-284 Low
No
No
8.3 20.03.2024 SB2024032026
#VU83257 - Improper Access Control
CVE-2023-47642
CWE-284 Low
No
No
7.5 17.11.2023 SB2023111746
#VU80017 - Improper Authorization
CVE-2023-32678
CWE-285 Medium
No
No
7.3 25.08.2023 SB2023082527