Slack Nebula
3 CVEs affecting Slack Nebula. Latest disclosed: 2026-02-06. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-11498 | High | 8.8 | 2020-04-02 | Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tun… |
CVE-2026-25793 | High | 8.1 | 2026-02-06 | Nebula is a scalable overlay networking tool. In versions from 1.7.0 to 1.10.2, when using P256 certificates (which is not the default configuration), it is po… |
CVE-2025-62820 | Medium | 4.9 | 2025-10-23 | Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network. |