The number and severity of CVEs published that impact products developed by Its A Feature over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-57951MEDIUM Mythic before 3.4.0.60 contains a broken hasura permission filter on the payload_build_step table with an always-satisfied _or condition that bypasses operation-scoped access contr | Jun 29, 2026 | 6.5 | 30 | NO | NO |
CVE-2026-57952MEDIUM Mythic before 3.4.0.60 contains an authorization bypass vulnerability in four REST endpoints (c2profile_config_check_webhook, c2profile_redirect_rules_webhook, c2profile_get_ioc_we | Jun 29, 2026 | 6.5 | 29 | NO | NO |
CVE-2026-57953MEDIUM Mythic before 3.4.0.60 contains an authorization bypass vulnerability that allows authenticated spectator-role users to perform unauthorized write operations by accessing the event | Jun 29, 2026 | 5.4 | 28 | NO | NO |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Its A Feature.
Media articles that mention a CVE ID that affects a product developed by Its A Feature — matched by CVE ID, not by vendor name.