PlexTrac, Inc. — recent CVEs https://vulnogram.org/ Most recent CVEs assigned by PlexTrac, Inc. (plextrac). https://vulnogram.org/seaview/icons/plextrac.png PlexTrac, Inc. — recent CVEs https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT CVE-2024-12687 · 8.6 HIGH — Insecure YAML Deserialization https://vulnogram.org/CVE-2024-12687 https://vulnogram.org/CVE-2024-12687 Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes. This issue affects PlexTrac: from 1.61.3 before 2.8.1. High Mon, 16 Dec 2024 19:09:08 GMT CVE-2024-11839 · 8.6 HIGH — Insecure Deserialization via Runbooks Imports https://vulnogram.org/CVE-2024-11839 https://vulnogram.org/CVE-2024-11839 Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1. High Fri, 13 Dec 2024 05:51:24 GMT CVE-2024-11838 · 8.6 HIGH — Local File Inclusion https://vulnogram.org/CVE-2024-11838 https://vulnogram.org/CVE-2024-11838 External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an undocumented API endpoint.This issue affects PlexTrac: from 1.61.3 before 2.8.1. High Fri, 13 Dec 2024 05:51:12 GMT CVE-2024-11837 · 8.6 HIGH — N1QL Injection https://vulnogram.org/CVE-2024-11837 https://vulnogram.org/CVE-2024-11837 Improper Neutralization of Special Elements used in an N1QL Command ('N1QL Injection') vulnerability in PlexTrac allows N1QL Injection.This issue affects PlexTrac: from 1.61.3 before 2.8.1. High Fri, 13 Dec 2024 05:50:55 GMT CVE-2024-11836 · 8.6 HIGH — Server-side Request Forgery https://vulnogram.org/CVE-2024-11836 https://vulnogram.org/CVE-2024-11836 Server-Side Request Forgery (SSRF) vulnerability in PlexTrac allowing requests to internal system resources.This issue affects PlexTrac: from 1.61.3 before 2.8.1. High Fri, 13 Dec 2024 05:50:35 GMT CVE-2024-11835 · 7 HIGH — Denial of Service https://vulnogram.org/CVE-2024-11835 https://vulnogram.org/CVE-2024-11835 Uncontrolled Resource Consumption vulnerability in PlexTrac allows WebSocket DoS.This issue affects PlexTrac: from 1.61.3 before 2.8.1. High Fri, 13 Dec 2024 05:49:58 GMT CVE-2024-11834 · 9.1 CRITICAL 🌩️ — Arbitrary File Write via PTRAC Import https://vulnogram.org/CVE-2024-11834 https://vulnogram.org/CVE-2024-11834 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1. Critical Network Exploitable Fri, 13 Dec 2024 05:49:41 GMT CVE-2024-11833 · 8.9 HIGH — Arbitrary Directory Write via Runbooks Artifact Upload https://vulnogram.org/CVE-2024-11833 https://vulnogram.org/CVE-2024-11833 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1. High Fri, 13 Dec 2024 05:49:23 GMT