Ateme vulnerabilities
We track 3 vulnerabilities in Ateme products across 6 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 30, 2025.
Latest Ateme vulnerabilities
- 10.0 Critical severity
Flamingo XL: Improper Neutralization of Special Elements used in an OS Command
Anevia Flamingo XL 3.2.9 contains a restricted shell vulnerability that allows remote attackers to escape the sandboxed environment through the traceroute command. Attackers can exploit the traceroute command to inject shell commands and gain full root access
- 9.8 Critical severity
Anevia Flamingo XL/XS: Use of Hard-coded Credentials
Anevia Flamingo XL/XS 3.6.20 contains a critical vulnerability with weak default administrative credentials that can be easily guessed. Attackers can leverage these hard-coded credentials to gain full remote system control without complex authentication mechan
- 8.8 High severity
An issue in Ateme Flamingo XL v.3.6.20 and XS v.3.6.5 allows a remote authenticated attacker…
An issue in Ateme Flamingo XL v.3.6.20 and XS v.3.6.5 allows a remote authenticated attacker to execute arbitrary code and cause a denial of service via a the session expiration function.