Skip to content

Vendor

the-hideout vulnerabilities

3 published CVES affecting the-hideout, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
1
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of the-hideout alerts

Products

Latest the-hideout CVEs

Newest publication first

  1. CVE-2026-21856 Tarkov Data Manager has Authenticated SQL Injection

    Published
    HighCVSS 8.8 EPSS 0.40%

    The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to commit 9bdb3a75a98a7047b6d70144eb1da1655d6992a8, a time based blind SQL injection vulnerability in the webhook edit and scanner api endpoints that allow an authenticated attacker to execute arbitrary SQL q...

  2. CVE-2026-21855 Tarkov Data Manager has Unauthenticated Reflected XSS

    Published
    MediumCVSS 6.1 EPSS 0.24%

    The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to 02 January 2025, a reflected Cross Site Scripting (XSS) vulnerability in the toast notification system allows any attacker to execute arbitrary JavaScript in the context of a victim's browser session by cr...

  3. CVE-2026-21854 Tarkov Data Manager Authentication Bypass vulnerability

    Published
    CriticalCVSS 9.8 EPSS 0.46%

    The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to 02 January 2025, an authentication bypass vulnerability in the login endpoint allows any unauthenticated user to gain full admin access to the Tarkov Data Manager admin panel by exploiting a JavaScript pro...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.