Login Request a demo
GI
Product
gibbon
by gibbonedu · last CVE Sep 25, 2026
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 3High 6Medium 10Low 1
Severity
All severities20Critical3High6Medium10Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add gibbon to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-8208
8.9
0%
May 9
Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the report archive directory and forcing interpretation of a user…
Affected: before 30.0.01
CVE-2025-26211
8.8
0%
May 27
Gibbon before 29.0.00 allows CSRF
Affected: before 29.0.00
CVE-2024-24725
8.8
52%
Mar 23
Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the…
Affected: through 26.0.00
CVE-2022-27305
8.8
1%
May 25
Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to session fixation
Affected: before 23.0.02
CVE-2023-45880
7.2
1%
Nov 14
GibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template builder
Affected: through 25.0.00
CVE-2026-8207
7.0
0%
May 9
Gibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by abusing the Tracking/graphing…
Affected: before 30.0.01
Showing 6