Skip to content
OpenAdvisories

Vendor

SpecterOps

2 known vulnerabilities.

Products

BloodHound 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-59255

    BloodHound Missing Authorization on Custom Node Management API

    BloodHound through 9.4.0, fixed in commit 8f79035, contains a missing authorization vulnerability in the custom-nodes API endpoints that allows any authenticated user to modify the global graph schema. Attackers with valid session tokens can create, update, o…

    SpecterOps BloodHound