AmidaWare vulnerabilities
We track 2 vulnerabilities in AmidaWare products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest AmidaWare vulnerabilities
- 9.1 Critical severity
Tactical RMM: External Control of File Name or Path
Tactical RMM 0.17.0 through 1.6.1 contains an arbitrary file read in the /reporting/templates/preview/ endpoint because WeasyPrint resolves file:// links in user-supplied template_md and embeds the files in the returned PDF. Users with report management permis
- 8.8 High severity
Tactical Rmm: Improper Neutralization of Special Elements Used in a Template Engine
A Server-Side Template Injection (SSTI) vulnerability in the /reporting/templates/preview/ endpoint of Amidaware Tactical RMM, affecting versions equal to or earlier than v1.3.1, allows low-privileged users with Report Viewer or Report Manager permissions to a