MinIO Inc MinIO

Name: MinIO Inc MinIO
Brand: MinIO Inc

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical9high5medium0low

updated 2026-10-27

vulnerabilities (20)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-28432US	high7.5OT critical	84.0% (100th)	KEV	no fix	2023-03-22	2019-12-17t23-16-33z → 2023-03-20t20-16-18z
CVE-2023-28434US	high8.8OT critical	7.92% (95th)	KEV	no fix	2023-03-22	≤ 2023-03-20t20-16-18z
CVE-2021-43858US	medium6.5OT high	35.5% (98th)	Exploit	no fix	2021-12-27	≤ 2021-12-27T07-23-18Z
CVE-2024-24747US	high8.8OT high	34.1% (98th)	Exploit	no fix	2024-01-31	≤ 2024-02-09T21-25-16Z
CVE-2025-62506US	—OT elevated	0.55% (46th)	Exploit	no fix	2025-10-16	≤ RELEASE.2025-10-15T17-29-55Z
CVE-2026-42600US	medium4.9	8.70% (95th)	—	no fix	2026-05-11	2022-07-24t01-54-52z → 2026-04-14t21-32-45z
CVE-2025-31489US	—	2.47% (84th)	—	no fix	2025-04-03	≤ 2025-04-03T14-56-28Z
CVE-2021-21362US	medium6.5OT elevated	1.32% (71st)	—	no fix	2021-03-08	≤ 2021-03-04t00-53-13z
CVE-2023-28433US	high8.8	0.98% (62nd)	—	no fix	2023-03-22	≤ 2023-03-20t20-16-18z
CVE-2023-25812US	high8.8	0.95% (61st)	—	no fix	2023-02-21	2020-04-10t03-34-42z → 2023-02-17t17-52-43z
CVE-2023-27589US	medium6.5	0.90% (59th)	—	no fix	2023-03-14	≤ 2023-03-13T19-46-17Z
CVE-2024-36107US	—	0.63% (50th)	—	no fix	2024-05-28	≤ RELEASE.2024-05-27T19-17-46Z
CVE-2024-55949US	—	0.61% (49th)	—	no fix	2024-12-16	≤ 2024-12-13T22-19-12Z
CVE-2025-27414US	—	0.59% (48th)	—	no fix	2025-02-28	≤ 2025-02-28T09-55-16Z
CVE-2026-39414US	medium6.5	0.48% (41st)	—	no fix	2026-04-08	2018-08-18t03-49-57z → 2025-10-15t17-29-55z
CVE-2026-33419US	high7.5	0.46% (39th)	—	no fix	2026-03-24	= RELEASE.2026-03-17T21-25-16Z
CVE-2026-33322US	critical9.8OT elevated	0.43% (37th)	—	no fix	2026-03-24	RELEASE.2022-11-08T05-27-07Z → RELEASE.2026-03-17T21-25-16Z
CVE-2026-40344US	high8.2OT elevated	0.42% (36th)	—	no fix	2026-04-22	2023-05-18t00-05-36z → 2026-04-11T03-20-12Z
CVE-2026-41145US	high8.2	0.35% (28th)	—	no fix	2026-04-22	2023-05-18t00-05-36z → 2026-04-11T03-20-12Z
CVE-2026-34204US	high7.1	0.12% (2nd)	—	no fix	2026-03-31	RELEASE.2024-03-30T09-41-56Z → RELEASE.2026-03-26T21-24-40Z

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management5 CVEs
CWE-287Improper Authentication5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-863Incorrect Authorization3 CVEs
CWE-1188Initialization of a Resource with an Insecure Default1 CVEs
CWE-204Observable Response Discrepancy1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-264CWE-2641 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)20 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan