Login Request a demo
KO
Product
KodExplorer
by kodcloud · last CVE Oct 25, 2026
16
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 4High 4Medium 7Low 1
Severity
All severities16Critical4High4Medium7Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add KodExplorer to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-116057
New
6.3
0%
Oct 25
KodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload
Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +34 more
CVE-2026-116056
New
6.3
0%
Oct 25
KodCloud KodExplorer Remote Download web.function.php request_url_safe server-side request forgery
Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +34 more
CVE-2026-6571
6.3
0%
Apr 19
kodcloud KodExplorer systemRole.class.php roleGroupAction authorization
Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +34 more
CVE-2025-34504
6.1
0%
Dec 11
KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint
Affected: 4.52
CVE-2023-49489
6.1
1%
Dec 19
Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APP_HOST…
Affected: 4.51
CVE-2021-36646
6.1
1%
Sep 6
A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page
Affected: 4.45
CVE-2023-37153
6.1
1%
Jul 10
KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation feature
Affected: 4.51
Showing 7