exonaut vulnerabilities and fixes

Recent CVEs affecting exonaut, with upgrade or downgrade steps. 7 tracked.

exonaut has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-08-07. Highest priority: CVE-2025-46658 (score 48/100).

• CVE-2024-55402 MEDIUM 5.3 UPGRADE 4C Strategies Exonaut before v22.4 was discovered to contain an access control issue.
• CVE-2024-55401 MEDIUM 6.5 UPGRADE An issue in 4C Strategies Exonaut before v22.4 allows attackers to execute a directory traversal.
• CVE-2024-55399 MEDIUM 6.5 UPGRADE 4C Strategies Exonaut before v21.6.2.1-1 was discovered to contain a Server-Side Request Forgery (SSRF).
• CVE-2024-55398 MEDIUM 6.5 UPGRADE 4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions.
• CVE-2025-46660 MEDIUM 5.3 DOWNGRADE An issue was discovered in 4C Strategies Exonaut 21.6
• CVE-2025-46659 HIGH 7.5 DOWNGRADE An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6
• CVE-2025-46658 CRITICAL 9.8 DOWNGRADE An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6

FAQ

How do I fix exonaut vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is exonaut being exploited right now?

None of the tracked exonaut CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which exonaut CVE should I patch first?

CVE-2025-46658 currently ranks highest (48/100): An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6.

RSS feed for exonaut · ← Back to latest CVEs