tryton has 4 CVEs on record between 2022 and 2025. The busiest recent month was November 2025 with 3. The median CVSS is 6.8 (medium). Most affected products: trytond (3), tryton (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.8
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2014-6633High· 8.8Tryton vulnerable to arbitrary command execution49CVE-2025-66423High· 7.1Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor39CVE-2025-66424Medium· 6.5Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export36CVE-2025-66422Medium· 4.3Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information24
tryton vulnerabilities
CVEs affecting tryton, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2025-66423High· 7.1Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor
Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
CVE-2025-66422Medium· 4.3Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information
Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
CVE-2025-66424Medium· 6.5Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export
Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
CVE-2014-6633High· 8.8Tryton vulnerable to arbitrary command execution
Tryton vulnerable to arbitrary command execution