Cometd vulnerabilities
We track 2 vulnerabilities in Cometd products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 18, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Cometd vulnerabilities
- 7.5 High severity
cometd: Uncontrolled Resource Consumption
CometD is a scalable comet implementation for web messaging. In versions 5.0.0 through 5.0.22, 6.0.0 through 6.0.18, 7.0.0 through 7.0.18, and 8.0.0 through 8.0.8, bad clients that always send a fixed batch value when the server is using the acknowledgement ex
- 8.1 High severity
cometd: Incorrect Authorization
CometD is a scalable comet implementation for web messaging. In any version prior to 5.0.11, 6.0.6, and 7.0.6, internal usage of Oort and Seti channels is improperly authorized, so any remote user could subscribe and publish to those channels. By subscribing t