serena-agent has 1 CVE on record. The median CVSS is 8.3 (high).

CVEs per month

Last 12 months, by publish date

1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11

Exploited share: 0% vs 1% corpus
Median CVSS: 8.3
Publish → KEV: —
Last 90 days: 0 prev 1

Weakness classes

Products

serena-agent 1

Follow serena-agent:RSS feed Save a search →Embed badge ↗

1

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-49471High· 8.3Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE46

serena-agent vulnerabilities

CVEs affecting serena-agent, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2026-49471High· 8.3

Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE

Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE

▾ Twilightserena-agent · serena-agentEPSS 0.37%via GHSA

serena-agent vulnerabilities (CVEs) · VulnSea