Login Request a demo
LI
Product
liquidfiles
by liquidfiles · last CVE Jun 20, 2026
9
CVEs
0
On KEV
9.0
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 3Medium 4Low 1
Severity
All severities9Critical1High3Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add liquidfiles to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-29071
9.0
2%
Nov 25
An XSS issue was found in the Shares feature of LiquidFiles before 3.3.19
Affected: before 3.3.19
CVE-2025-46093
8.8
1%
Aug 4
LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows FTPDrop users to execute arbitrary code as root by leveraging the Actionscript…
Affected: before 4.1.2
CVE-2021-43397
8.8
4%
Nov 11
LiquidFiles before 3.6.3 allows remote attackers to elevate their privileges from Admin (or User Admin) to Sysadmin
Affected: before 3.6.3
CVE-2025-56132
7.3
1%
Sep 30
LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality
Affected: before 4.2.0
CVE-2023-4393
6.1
0%
Oct 29
HTML and SMTP Injection in LiquidFiles
Affected: before 3.7.14
CVE-2020-29072
6.1
1%
Nov 25
A Cross-Site Script Inclusion vulnerability was found on LiquidFiles before 3.3.19
Affected: before 3.3.19
CVE-2026-12673
5.9
0%
Jun 20
Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain to a Sysadmin by…
Affected: before 4.2.12
CVE-2021-30140
5.4
1%
Apr 6
LiquidFiles 3.4.15 has stored XSS through the "send email" functionality when sending a file via email to an administrator
Affected: 3.4.15
CVE-2025-46094
3.8
1%
Aug 4
LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript
Affected: before 4.1.2
Showing 9