Advisories · Technology

cerebrate.

Every CVE that names cerebrate among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-53912 CVE record

CVSS 5.1 Medium

Cerebrate self-registration password hash exposure via inbox and audit log views
- cerebrate
- Information disclosure
Not analysed yet 11 Jun 2026
CVE-2026-53911 CVE record

CVSS 6.3 Medium

Cerebrate primary key mass assignment in CRUD edit operations allows authenticated users to overwrite unrelated records
- cerebrate
- Broken access control
Not analysed yet 11 Jun 2026
CVE-2026-53901 CVE record

CVSS 8.7 High

Cerebrate before v1.37 allows mass assignment of record identifiers during object creation
- cerebrate
- CWE-20
Not analysed yet 11 Jun 2026
CVE-2025-66385 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Cerebrate: UsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged…
- Cerebrate
- CWE-472
Not analysed yet 28 Nov 2025