archerysec vulnerabilities

Products

• archery 1
• archerysec 1

Latest archerysec CVEs

Newest publication first

1. CVE-2026-92765 ArcherySec through 2.0.6 Information Disclosure via WebScanVulnList

   Published 2026-09-16

   High·CVSS 7.1 EPSS 0.45%

   ArcherySec through 2.0.6 fails to validate organization ownership in the WebScanVulnList endpoint, allowing authenticated users to read vulnerability findings from other organizations. Attackers can supply arbitrary scan identifiers to retrieve complete web vulnerability data inc...

2. CVE-2019-20008 In Archery before 1.3, inserting an XSS payload into a project name (either by creating a new project or editing an existing one) will result in stored XSS on the vulnerability-scan scheduling page.

   Published 2019-12-26

   Medium·CVSS 5.4 EPSS 0.92%

   In Archery before 1.3, inserting an XSS payload into a project name (either by creating a new project or editing an existing one) will result in stored XSS on the vulnerability-scan scheduling page.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.