PatchTheCVEcmu vulnerabilities
Recent CVEs affecting cmu products. 2 tracked.
cmu has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-04-02. Highest priority: CVE-2026-35467 (score 35/100).
- CVE-2026-35467 HIGH 7.5 UPGRADE The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or o
- CVE-2026-35466 MEDIUM 6.1 UPGRADE XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts in
FAQ
How do I fix cmu vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cmu being exploited right now?
None of the tracked cmu CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cmu CVE should I patch first?
CVE-2026-35467 currently ranks highest (35/100): The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or o.