How many Altium on-prem enterprise server CVEs are in CISA KEV?

None of Altium on-prem enterprise server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Altium on-prem enterprise server are affected?

5 distinct Altium on-prem enterprise server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Altium on-prem enterprise server CVEs?

Altium on-prem enterprise server's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-306 (Missing Authentication for Critical Function), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).

How many critical Altium on-prem enterprise server vulnerabilities are there?

Altium on-prem enterprise server has 4 critical and 2 high-severity CVEs.

What is the average severity of Altium on-prem enterprise server CVEs?

The average CVSS base score across Altium on-prem enterprise server's scored CVEs is 8.8.

RadicalNotion.AI

Log in Start free

Altium

7 CVEs

Altium on-prem enterprise server Vulnerabilities

Name: Altium on-prem enterprise server vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for on-prem enterprise server by Altium.

7

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.8

Avg CVSS

2026–2026

Last updated June 5, 2026

Overview

Altium on-prem enterprise server has 7 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Altium on-prem enterprise server, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Altium on-prem enterprise server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical4

High2

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Altium on-prem enterprise server's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Altium on-prem enterprise server CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Altium on-prem enterprise server version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 8.1.13 CVEs
7.0.3 <= v < 7.0.63 CVEs
8.0.1 <= v <= 8.0.11 CVE

Fixed in

7.0.63 CVEs
8.1.13 CVEs

Find a version

7 CVEs

Sort

Path Traversal in Altium Enterprise Server NIS Allows Unauthenticated Arbitrary File Write and File Read
CVE-2026-11420
Patch
CWE-306
Critical · CVSS 10.0
EPSS 0.7% (52th pct)2026-06-05
Path Traversal in Altium Enterprise Server Vault UploadController Allows Arbitrary File Write
CVE-2026-11419
Patch
CWE-22
Critical · CVSS 9.4
EPSS 0.5% (44th pct)2026-06-05
Unauthenticated File Exfiltration in Altium Enterprise Server Vault Service via Hard-coded Cryptographic Key and Path Traversal
CVE-2026-11414
Patch
CWE-22
Critical · CVSS 10.0
EPSS 0.5% (40th pct)2026-06-05
HTML Injection Leading to Script Execution in Altium Enterprise Server
CVE-2025-27380
Patch
CWE-79
High · CVSS 7.6
EPSS 0.3% (17th pct)2026-01-22
Stored Cross-Site Scripting in AES BOM Viewer
CVE-2025-27379
Patch
CWE-79
Medium · CVSS 6.8
EPSS 0.2% (12th pct)2026-01-22
SQL Injection in AES Due to Inactive SQL Parsing Configuration
CVE-2025-27378
Patch
CWE-89
Critical · CVSS 9.8
EPSS 0.4% (30th pct)2026-01-22
Stored Cross-Site Scripting in Altium Enterprise Server Workflow Engine Allows Privilege Escalation
CVE-2026-1010
Patch
CWE-79
High · CVSS 8.0
EPSS 0.3% (27th pct)2026-01-15

Common weakness types

The CWE weakness categories most often found in Altium on-prem enterprise server CVEs. Follow any weakness for its full explanation.

Other Altium products

Browse vulnerabilities for other products by Altium.

Altium Enterprise Server11 CVEs Altium 3656 CVEs AES3 CVEs Altium Live3 CVEs Altium Designer1 CVEs Altium Support Center1 CVEs designer1 CVEs Forum module1 CVEs

All Altium vulnerabilities

Frequently asked questions

Common questions about Altium on-prem enterprise server vulnerabilities.

How many CVEs does Altium on-prem enterprise server have?: Altium on-prem enterprise server has 7 published CVE records since 2026.
How many Altium on-prem enterprise server CVEs are in CISA KEV?: None of Altium on-prem enterprise server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Altium on-prem enterprise server vulnerabilities?: No Altium on-prem enterprise server CVEs currently have a tracked public exploit in this dataset.
Which versions of Altium on-prem enterprise server are affected?: 5 distinct Altium on-prem enterprise server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Altium on-prem enterprise server CVEs?: Altium on-prem enterprise server's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-306 (Missing Authentication for Critical Function), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).
How many critical Altium on-prem enterprise server vulnerabilities are there?: Altium on-prem enterprise server has 4 critical and 2 high-severity CVEs.
What is the average severity of Altium on-prem enterprise server CVEs?: The average CVSS base score across Altium on-prem enterprise server's scored CVEs is 8.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Altium on-prem enterprise server vulnerabilities

Monitor new Altium on-prem enterprise server vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing