MA
Vendor
MarkUsProject
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-25962 | MA Markus MarkUsProject | 6.5 | Mar 6 | MarkUs: Zip bomb in config upload enables DoS |
| CVE-2026-27807 | MA Markus MarkUsProject | 4.9 | Mar 6 | MarkUs: YAML alias (‘billion laughs’) DoS in config upload |
| CVE-2026-28405 | MA Markus MarkUsProject | 5.4 | Mar 5 | MarkUs: Stored XSS in Submission HTML Preview Enables Instructor-Context Actions |
| CVE-2026-25057 | MA Markus MarkUsProject | 9.1 | Feb 9 | Zip Slip in MarkUs config upload allowing RCE |
| CVE-2026-24900 | MA Markus MarkUsProject | 6.5 | Feb 9 | MarkUs has a submission-view IDOR exposes all student submissions |
| CVE-2024-51743 | MA Markus MarkUsProject | 8.8 | Nov 18 | Arbitrary File Write leading up to remote code execution (instructor accounts) |
| CVE-2024-51499 | MA Markus MarkUsProject | 8.8 | Nov 18 | MarkUs Arbitrary File Write leading up to remote code execution (student accounts) |
| CVE-2024-47820 | MA Markus MarkUsProject | 3.5 | Nov 18 | MarkUs vulnerable to Path Traversal |