CyberSecBulletin

Tryton vulnerabilities

We track 2 vulnerabilities in Tryton products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 30, 2025.

2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score

Latest Tryton vulnerabilities

  • 7.1 High severity

    trytond: Incorrect Authorization

    CVE-2025-66423Tryton

    Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

  • 7.5 High severity

    Proteus: Improper Restriction of Recursive Entity References in DTDs

    CVE-2022-26662TrytonEPSS 1.97%

    An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x throug