[ Vendor · 2 CVEs ]
nautobot
CVEs affecting nautobot published in the last 30 days, plus any nautobot CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-83805 | 22 Sep 2026 | CVSS 6.4 | Nautobot: Authorization bypass in approval workflow REST API allows self-approval and unauthorized activation of scheduled jobsNautobot is a Network Source of Truth and Network Automation Platform. From 3.0.0 until 3.1.8, the generic ApprovalWorkflowStageResponse create… | Fix |
| CVE-2026-83801 | 22 Sep 2026 | CVSS 5.4 | Nautobot: Stored cross-site scripting (XSS) in object create/edit form help textNautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.37 and 3.1.8, a user with extras.add_relationship or… | Fix |