Mythic vulnerabilities

CVEs whose affected-version data names the Mythic package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119764Medium· 6.8PoC

1w ago

Mythic 3.2.16 through 3.4.0.61 Stored XSS via Agent-Downloaded File Preview

Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that allows attackers controlling target endpoint files to run JavaScript in the Mythic UI origin by planting HTML in .pdf-named files. When an operator …

▾ Twilightits-a-feature · MythicEPSS 0.32%via CVEORG