Skip to content
OpenAdvisories

Vendor

Akamai

16 known vulnerabilities.

Products

Guardicore Platform Agent 7 CloudTest 2 AkamaiGhost 2 Zero Trust Client 1 Rate Control 1 Ghost 1 Enterprise Application Access 1 App & API Protector 1 Akamai CLI 1
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-82518

    Akamai CLI before 2.0.6 Path Traversal via cli.json Command Names

    Akamai CLI before 2.0.6 contains a path traversal vulnerability that allows malicious packages to write files outside the install directory via unvalidated commands[].name values in cli.json. Attackers who convince victims to install or update a package can u…

    Akamai Akamai CLI
  • Medium 4.7
    CVE-2026-50217

    A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent (GPA) allows a loc…

    Akamai Guardicore Platform Agent
  • Medium 4.4
    CVE-2026-50215

    A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) be…

    Akamai Guardicore Platform Agent
  • Medium 5.3
    CVE-2026-50216

    An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akam…

    Akamai Guardicore Platform Agent
  • Medium 6.7
    CVE-2026-46449

    The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerabili…

    Akamai Guardicore Platform Agent
  • Medium 4.0
    CVE-2026-26365

    Akamai Ghost on Akamai CDN edge servers before 2026-02-06 mishandles processing of custom hop-by-hop HTTP headers, wher…

    Akamai Ghost
  • Medium 4.0
    CVE-2025-54142

    Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because th…

    Akamai AkamaiGhost
  • Medium 4.0
    CVE-2025-32094 Public exploit

    An issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26. Under certain circumsta…

    Akamai AkamaiGhost
  • Medium 5.8
    CVE-2025-52491

    Akamai CloudTest before 60 2025.06.09 (12989) allows SSRF.

    Akamai CloudTest
  • Medium 5.8
    CVE-2025-49493 Public exploit Scanner template

    Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.

    Akamai CloudTest
  • Medium 5.4
    CVE-2025-30143

    Rule 3000216 (before version 2) in Akamai App & API Protector (with Akamai ASE) before 2024-12-10 does not properly con…

    Akamai App & API Protector