Vendor
SaltStack
As of , 3 SaltStack vulnerabilities are on CISA's list of exploited vulnerabilities; 0 were added in 2026. Patch first: CVE-2020-11651.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2020-11651Authentication Bypass | SaltStack Salt | Patch this weekMetasploit module; EPSS 0.97 | 0.97 | ||
| 2 | CVE-2020-11652Path Traversal | SaltStack Salt | Patch this weekMetasploit module; EPSS 0.86 | 0.86 | ||
| 3 | CVE-2020-16846Shell Injection | SaltStack Salt | Patch this weekMetasploit module; EPSS 0.99 | 0.99 |
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2021 | 3 |
| 2022 | none |
| 2023 | none |
| 2024 | none |
| 2025 | none |
| 2026 | none |