Sploitus

20 exploited vulnerabilities in Cursor

Vulnerabilities with publicly known exploits

Vendors
Cursor, Anysphere, Google, Unknown, Jetbrains, Microsoft
With known exploits
20
Affected Anysphere Cursor versions
< 1.3
Affected Eclipse Open Vsx versions
< 1.0.2

Vulnerabilities with exploits

Highest CVSS first — 1 of these already have exploit code on Sploitus

CVE-2026-26268
CVSS 9.9 CRITICAL 2026-02-13FIX AVAILABLE
CVE-2025-54130
CVSS 9.8 CRITICAL 2025-08-05FIX AVAILABLE
CVE-2025-54135
CVSS 9.8 CRITICAL 2025-07-07FIX AVAILABLE
CVE-2025-54133
CVSS 9.6 CRITICAL 2025-08-01FIX AVAILABLE
CVE-2025-54136 3 exploits
CVSS 9.0 HIGH 2025-07-29FIX AVAILABLE
slopguard📄 Cursor IDE MCP Deeplink Remote Code Execution
CVE-2026-63093
CVSS 8.8 HIGH 2026-07-17FIX AVAILABLE
CVE-2025-64108
CVSS 8.8 HIGH 2025-11-04FIX AVAILABLE
CVE-2025-64107
CVSS 8.8 HIGH 2025-11-04FIX AVAILABLE
CVE-2025-64106
CVSS 8.8 HIGH 2025-11-04FIX AVAILABLE
CVE-2025-61593
CVSS 8.8 HIGH 2025-10-03FIX AVAILABLE
CVE-2025-61592
CVSS 8.8 HIGH 2025-10-03FIX AVAILABLE
CVE-2025-61591
CVSS 8.8 HIGH 2025-10-03FIX AVAILABLE
CVE-2025-54131
CVSS 8.8 HIGH 2025-08-01FIX AVAILABLE
CVE-2025-52882
CVSS 8.8 HIGH 2025-06-23FIX AVAILABLE
CVE-2026-13323
CVSS 8.7 HIGH 2026-07-01FIX AVAILABLE
CVE-2025-64110
CVSS 8.7 HIGH 2025-11-04FIX AVAILABLE
CVE-2025-61590
CVSS 7.5 HIGH 2025-10-03FIX AVAILABLE
CVE-2025-54132
CVSS 7.5 HIGH 2025-08-01FIX AVAILABLE
CVE-2026-22708
CVSS 7.2 HIGH 2026-01-14FIX AVAILABLE
CVE-2025-61589
CVSS 5.9 MEDIUM 2025-10-03FIX AVAILABLE