Exposure of Express
Web frameworks, Web servers54
exposure score
76,224
sites use
0
exploited
3
critical
CVEs
11 resultsCVE-2026-34909CRITICALA malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the uEPSS 0.9%CVE-2026-47370CRITICALA malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain deEPSS 0.8%CVE-2024-29041MEDIUMExpress.js Open Redirect in malformed URLsEPSS 0.8%CVE-2024-43796MEDIUMexpress vulnerable to XSS via response.redirect()EPSS 0.5%CVE-2024-10491MEDIUMPreload arbitrary resources by injecting additional `Link` headersEPSS 0.4%CVE-2024-9266MEDIUMOpen RedirectEPSS 0.4%CVE-2026-47368HIGHA malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtaiEPSS 0.4%CVE-2026-47369CRITICALA malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain deEPSS 0.3%CVE-2026-42349HIGHClerk: Authorization bypass when combining organization, billing, or reverification checksEPSS 0.2%CVE-2026-27508MEDIUMSmoothwall Express < 3.1 Update 13 Reflected XSS in redirect.cgi via url ParameterEPSS 0.2%CVE-2026-26352MEDIUMSmoothwall Express < 3.1 Update 13 Stored XSS in vpnmain.cgi via VPN_IP ParameterEPSS 0.1%
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →