Linear vendor intelligence

Linear Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting Linear products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse Linear KEVs Full KEV feed

Total KEVs: 3; Known exploited vulnerabilities affecting Linear products
In CISA KEV: 1; Records also listed in the official catalog
Beyond CISA KEV: 2; Additional exploited CVEs absent from CISA KEV
Sensor Observed: 0; Linear KEVs with sensor-observed exploitation activity

The catalog gap matters for Linear exposure

Two of the three exploited Linear CVEs tracked here are not in CISA KEV. Teams relying on the official catalog alone would miss two-thirds of this vendor portfolio.

33%
Covered by CISA: 67%
Beyond CISA: 1
Product families

Attested Linear CVEs

Search the exploited-vulnerability portfolio, then narrow it to official CISA coverage or the additional records KEV Intelligence tracks beyond the catalog.

How exploitation is verified

CVE / description	Product	Confidence	CISA KEV	Added
CVE-2022-46381 Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_template_v0.php component). This...	eMerge E3-Series	High	Beyond CISA	14 Jul 2025
CVE-2019-7256 Linear eMerge E3-Series devices allow Command Injections.	eMerge E3-Series	Confirmed	In CISA	25 Mar 2024
CVE-2019-7254 Linear eMerge E3-Series devices allow File Inclusion.	eMerge E3-Series	High	Beyond CISA	02 Jul 2019

Showing 3 of 3 Linear known exploited vulnerabilities.

Recurring weakness patterns

Limitation, neutralization, and neutralization account for three mapped occurrences across this Linear KEV portfolio.

Browse all KEVs →

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Early warning alerts

Get alerts on high-impact exploitation

Receive curator-selected alerts when exploitation activity warrants attention. Each alert includes the evidence and context needed to decide what requires attention now.