DumbWareio vulnerabilities
5 published CVEs name DumbWareio among the affected products.
- 5Published CVEs5 of them scored
- 2Last 12 monthspublished in the last year
- 2Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-45231
DumbAssets 1.0.11 Stored Cross-Site Scripting via Asset Fields
DumbWareio · DumbAssets
Medium5.3 - CVE-2026-45230
DumbAssets 1.0.11 Path Traversal File Deletion via /api/delete-file
DumbWareio · DumbAssets
High8.8 - CVE-2025-47929
DumbDrop vulnerable to DOM XSS via file upload
DumbWareio · DumbDrop
Low2.1 - CVE-2025-24971
OS Command Injection endpoint '/upload/init' parameter 'filename' (RCE) in DumpDrop
DumbWareio · DumbDrop
Critical9.5 - CVE-2025-24891
Dumb Drop has an arbitrary file overwrite and path traversal for root shell
DumbWareio · DumbDrop
Critical9.7