tactical_rmm vulnerabilities

CVEs whose affected-version data names the tactical_rmm package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121578Medium· 6.1PoC

5d ago

CVE-2026-121578

Tactical RMM contains a stored XSS vulnerability caused by improperly validated input or encode output for various fields, enabling HTML/JavaScript to be stored in the tools database, which is then executed in the browsers of users when …

▾ TwilightAmidaware · Tactical RMMEPSS 0.31%via CVEORG