Bamboo Data Center vulnerabilities
3 known CVE vulnerabilities in Bamboo Data Center, translated and rated.
- CVE-2026-21584High
Bamboo Data Center versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 have an Improper Authorization vulnerability (CVSS 7.6). An authenticated attacker can gain unintended access, potentially exposing resources or functionality, leading to sensitive information disclosure or arbitrary code execution.
- CVE-2026-21571High
Bamboo Data Center contains a critical OS command injection vulnerability (RCE) with CVSS 9.4. An authenticated attacker can execute commands on the remote system, with high impact on confidentiality, integrity, and availability. Affected versions are 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0.
- CVE-2026-21570High
This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This RCE vulnerability, with a CVSS Score of 8.6, allows an authenticated attacker to execute malicious code on the remote system.