automation-gateway

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-62662.5.0 – < 2.5.20260422 ; 2.6.0 – < 2.6.20260422Aap-controller: aap-gateway: account hijacking and unauthorized access via unverified email linkingHIGH 8.30.4 %
CVE-2025-18012.5.0 – < 2.5.20250305-1Aap-gateway: aap-gateway privilege escalationHIGH 8.10.3 %