CVE Tools
Track your stack

Altium

16 CVEs tracked since 2026. Since Jan 2026, none of them reached CISA KEV.

Altium CVEs per month

Jan 2026 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Altium CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0190
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-0670
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Altium's monthly top three, with their CVEs summed over those months.

  1. Altium Enterprise Server71 month
  2. On-prem Enterprise Server72 months
  3. Aes31 month
  4. Altium 36531 month
  5. Altium Live31 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Altium.

  1. CVE-2026-92808Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromise—
  2. CVE-2026-14439Path Traversal in Altium Git Service Allows Remote Code Execution—
  3. CVE-2026-11431Path Traversal in Altium Projects Service Allows Arbitrary File Read—
  4. CVE-2026-11429Path Traversal in Altium Vault ScriptsController Allows Unauthenticated Remote Code Execution—
  5. CVE-2026-11424Server-Side Request Forgery in Altium Platform Design GraphQL Service Allows Information Disclosure—
  6. CVE-2026-11423Path Traversal in Altium Enterprise Server Collaboration Service Allows Privilege Escalation—
  7. CVE-2026-11420Path Traversal in Altium Enterprise Server NIS Allows Unauthenticated Arbitrary File Write and File Read9.8
  8. CVE-2026-11419Path Traversal in Altium Enterprise Server Vault UploadController Allows Arbitrary File Write8.8
  9. CVE-2026-11414Unauthenticated File Exfiltration in Altium Enterprise Server Vault Service via Hard-coded Cryptographic Key and Path Traversal9.8
  10. CVE-2026-9152Unauthenticated SOAP Endpoint in Altium 365 SearchService Allows Cross-Tenant Data Exfiltration and Index Destruction—
  11. CVE-2026-9129Path Traversal in Altium Enterprise Server Viewer StorageController Allows Arbitrary File Read—
  12. CVE-2026-9102Path Traversal in Altium Enterprise Server ComparisonService Allows Arbitrary File Write—
  13. CVE-2025-27380HTML Injection Leading to Script Execution in Altium Enterprise Server7.6
  14. CVE-2025-27379Stored Cross-Site Scripting in AES BOM Viewer6.8
  15. CVE-2025-27378SQL Injection in AES Due to Inactive SQL Parsing Configuration8.6

The record

Peak rank
#98 in Jan 2026
Busiest month shown
Jan 2026, 9 CVEs
Months with a KEV entry
0 since Jan 2026
Monthly snapshots
2 since 2026
Altium's full record, month by month