[ Vendor · 2 CVEs ]
ExpressGateway
CVEs affecting ExpressGateway published in the last 30 days, plus any ExpressGateway CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-107177 | 7 Oct 2026 | CVSS 5.9 | ExpressGateway express-gatewayExpress Gateway through 1.16.11 contains a hardcoded cryptographic key vulnerability that allows attackers with datastore access to decrypt stored… | |
| CVE-2026-107162 | 7 Oct 2026 | CVSS 6.8 | ExpressGateway express-gatewayExpress Gateway through 1.16.11 contains an authentication bypass vulnerability in the OAuth 2.0 refresh_token grant that fails to validate the token… |