cometd has 1 CVE on record. The median CVSS is 7.5 (high).

CVEs per month

Last 12 months, by publish date

1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11

Exploited share: 0% vs 1% corpus
Median CVSS: 7.5
Publish → KEV: —
Last 90 days: 0 prev 1

Weakness classes

CWE-400 1

Products

org.cometd.java:cometd-java-server-common 1

Follow cometd:RSS feed Save a search →Embed badge ↗

1

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2025-53114High· 7.5CometD is a scalable comet implementation for web messaging41

cometd vulnerabilities

CVEs affecting cometd, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2025-53114High· 7.5

CometD is a scalable comet implementation for web messaging

CometD is a scalable comet implementation for web messaging. In versions 5.0.0 through 5.0.22, 6.0.0 through 6.0.18, 7.0.0 through 7.0.18, and 8.0.0 through 8.0.8, bad clients that always send a fixed batch value when the server is using…

▾ Twilightcometd · org.cometd.java:cometd-java-server-commonEPSS 0.68%via NVD

cometd vulnerabilities (CVEs) · VulnSea