ThinkstAppliedResearch: CVE Program partner

CVEs, 365 days77 all time, 0 rejected

Quality100%median 99%

CVSS by the CNA100%share of records

CWE100%share of records

Affected versions100%not n/a or unspecified

CVSS added by CISA0%lower is better

Organisation	Thinkst Applied Research
Role	CNA
Type	Vendor
Reports to	mitre
Scope	Thinkst Applied Research’s products only.
Advisories	https://canary.tools/security-advisories

CVE-2026-85219 2026-09-21 · CVSS 3.7
Denial-of-Service in Redis module in Thinkst Canary's OpenCanary 0.9.9 allows an unauthenticated remote attacker cause unconstrained memory usage.
CVE-2026-85220 2026-09-21 · CVSS 3.7
A vulnerability in the Thinkst Canary honeypot Redis service allows an unauthenticated remote attacker to execute a Denial-of-Service attack against the honeypo
CVE-2026-16551 2026-07-22 · CVSS 6.9
Denial-of-Service in Thinkst Applied Research OpenCanary (MongoDB module) allows Excessive Allocation. This issue affects OpenCanary 0.9.8 only.
CVE-2026-13140 2026-06-24 · CVSS 1.1
Stored Cross-Site Scripting in the exposed AWS API key store of Thinkst Applied Research Canarytokens. Anonymous exploitation requires knowledge of a random
CVE-2026-12888 2026-06-22 · CVSS 2.0
An HTML injection vulnerability exists in the Google Chat webhook notification sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation i
CVE-2026-11859 2026-06-10 · CVSS 2.0
An HTML injection vulnerability in the "fetch links" email sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross-Site Scripting
CVE-2026-10729 2026-06-03 · CVSS 1.2
An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists in Thinkst Applied Research Canarytokens,

ThinkstAppliedResearch