RH
Vendor
Rhymix
1 product with CVEs on record
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-36453
RH
Rhymix
Rhymix
7.4
0%
Sep 13Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1
CVE-2025-45242
RH
Rhymix
Rhymix
7.7
0%
May 5Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php
CVE-2024-55089
RH
Rhymix
Rhymix
4.1
0%
Dec 18Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery (SSRF) in the background import data function because XML documents may contain external entities
CVE-2018-19601
RH
Rhymix
Rhymix
9.1
1%
Jan 3Rhymix CMS 1.9.8.1 allows SSRF via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload
CVE-2018-19600
RH
Rhymix
Rhymix
4.8
1%
Jan 3Rhymix CMS 1.9.8.1 allows XSS via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload