Skip to content
OpenAdvisories

Vendor

factionsecurity

5 known vulnerabilities.

Products

faction 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.7
    CVE-2026-44669

    Faction: Stored XSS in Assessment Attachment Filename Preview Rendering

    FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored cross-site scripting (XSS) via attachment filenames in assessment file preview flows. User-supplied filename values are persisted and later …

    factionsecurity faction
  • High 8.7
    CVE-2026-44667

    Faction: Stored XSS in Remediation Verification Attachment Filename Preview Rendering

    FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored cross-site scripting (XSS) via attachment filenames in remediation verification file preview flows. User-supplied filename values are persis…

    factionsecurity faction
  • High 7.5
    CVE-2025-27422

    FACTION Allows Authentication Bypass via User Creation

    FACTION is a PenTesting Report Generation and Collaboration Framework. Authentication is bypassed when an attacker registers a new user with admin privileges. This is possible at any time without any authorization. The request must follow the validation rules…

    factionsecurity faction