KO
Product
kodbox
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 13Low 3
Watch
Add kodbox to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-8753 | 6.3 | May 17 | kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +34 more |
| CVE-2026-4589 | 6.3 | Mar 23 | kalcaddle kodbox fileGet Endpoint editor.class.php PathDriverUrl server-side request forgery Affected: 1.64 |
| CVE-2026-2560 | 6.3 | Feb 16 | kalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection Affected: 1.64.05 |
| CVE-2026-5618 | 5.6 | Apr 6 | kalcaddle kodbox shareMake/shareCheck server-side request forgery Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +34 more |
| CVE-2026-4830 | 5.6 | Mar 26 | kalcaddle kodbox Public Share userShare.class.php add privilege escalation Affected: 1.64 |
| CVE-2026-4592 | 5.6 | Mar 23 | kalcaddle kodbox Password Login index.class.php tfaVerify improper authentication Affected: 1.64 |
| CVE-2026-18720 | 5.3 | Aug 4 | kalcaddle kodbox msgWarning Plugin action improper authorization Affected: 1.67 Build 02 |
| CVE-2024-51037 | 5.3 | Nov 15 | An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function Affected: before 1.52.04 |
| CVE-2025-9414 | 4.9 | Aug 25 | kalcaddle kodbox Download from Link serverDownload server-side request forgery Affected: 1.61 |
| CVE-2026-4591 | 4.7 | Mar 23 | kalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection Affected: 1.64 |
| CVE-2026-18721 | 4.3 | Aug 4 | kalcaddle kodbox SSO API Login apiLogin redirect Affected: 1.67 Build 02 |
| CVE-2025-11016 | 4.3 | Sep 26 | kalcaddle kodbox index.class.php fileOut path traversal Affected: 1.61.09 |
| CVE-2025-10233 | 4.3 | Sep 10 | kalcaddle kodbox editor.class.php fileSave path traversal Affected: 1.61 |
Showing 13