Skip to content
OpenAdvisories

Vendor

Altium

22 known vulnerabilities.

Products

Altium Enterprise Server 12 Altium 365 7 AES 3 Altium Live 3 Altium Designer 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2026-1010 Public exploit

    Stored Cross-Site Scripting in Altium Enterprise Server Workflow Engine Allows Privilege Escalation

    A stored cross-site scripting (XSS) vulnerability exists in the Altium Workflow Engine due to missing server-side input sanitization in workflow form submission APIs. A regular authenticated user can inject arbitrary JavaScript into workflow data. When an adm…

    Altium Altium Enterprise Server