Skip to content
OpenAdvisories

Vendor

Phase

1 known vulnerabilities.

Products

Phase Console 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-110210

    Phase Console through 2.77.3 Missing Authorization via secretHistory GraphQL Query

    Phase Console through 2.77.3 contains a missing authorization vulnerability that allows organisation members without Secrets read permission to read secret history via the secretHistory GraphQL query. Attackers holding an environment key can supply a known se…

    Phase Phase Console