Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.3%	CVE-2026-36501Controller · Improper Input Validation High7.5EPSS 0.3%2026-06-05CVE Database V5CVE-2026-36501 An issue in the Externalizable.readExternal() component of Controller v12.0.5 allows attackers to cause a Denial of Service (DoS) via a crafted input. EPSS 0.3%Vulnerability CWE-20	CVE Database V5	2026-06-05
Medium	6.6	EPSS 12%	CVE-2025-2172Aviatrix Controller · OS Command Injection Medium6.6EPSS 12%2025-06-23CVE Database V5CVE-2025-2172 Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing command injection via special characters in filenames EPSS 12%Vulnerability CWE-78	CVE Database V5	2025-06-23

Page 1 of 1