yogeshojha has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 6.4 (medium).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.4
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-92570Medium· 6.5reNgine through 2.2.0 contains an authorization bypass vulnerability in the GetFileContents API endpoint that allows any authenticated user to read bundled recon tool configuration files48CVE-2026-105487Medium· 6.3A vulnerability was found in yogeshojha reNgine up to 2.2.047
yogeshojha vulnerabilities
CVEs affecting yogeshojha, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-105487Medium· 6.3PoCA vulnerability was found in yogeshojha reNgine up to 2.2.0
A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomain_discovery of the file web/reNgine/tasks.py of the component listTargets Endpoint. The manipulation of the argument Name…
▾ Twilightyogeshojha · reNgineEPSS 1.1%via NVD
CVE-2026-92570Medium· 6.5PoCreNgine through 2.2.0 contains an authorization bypass vulnerability in the GetFileContents API endpoint that allows any authenticated user to read bundled recon tool configuration files
reNgine through 2.2.0 contains an authorization bypass vulnerability in the GetFileContents API endpoint that allows any authenticated user to read bundled recon tool configuration files. Attackers with low-privilege Auditor roles can ac…
▾ Twilightyogeshojha · rengineEPSS 0.44%via NVD