ISPConfig vulnerabilities
3 published CVEs name ISPConfig among the affected products.
- 3Published CVEs3 of them scored
- 1Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-61518
ISPConfig Authenticated SQL Injection via Remote API primary_id Parameter
ispconfig · ispconfig3
High8.7 - CVE-2013-3629
ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution
ISPConfig · ISPConfig
High8.8 - CVE-2012-2087
ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client interface.
ISPConfig · ISPConfig
Critical9.8