[ Vendor · 3 CVEs ]
Dayforce
CVEs affecting Dayforce published in the last 30 days, plus any Dayforce CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-73641 | 28 Sep 2026 | CVSS 5.1 | Dayforce ESS ExcelityDayforce ESS Excelity is vulnerable to Reflected XSS in multiple endpoints. An attacker can prepare a specially crafted URL that, when opened… | |
| CVE-2026-73642 | 28 Sep 2026 | CVSS 9.2 | Dayforce ESS ExcelityDayforce ESS Excelity is vulnerable to Path Traversal in file download functionality. An unauthenticated attacker can sent GET request with file path… | |
| CVE-2026-73640 | 28 Sep 2026 | CVSS 9.3 | Dayforce ESS ExcelityDayforce ESS Excelity is vulnerable to Time Based-Blind SQL Injection in password recovery functionality. The unauthenticated attacker can prepare… |