Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

lavalite vulnerabilities

3 published CVEs name lavalite among the affected products.

Newest CVEs

  • CVE-2026-113358

    LavaLite CMS through 10.1.2 Missing Authentication via Filer Download Routes

    lavalite · cms

    High8.7
  • CVE-2026-108951

    LavaLite CMS through 10.1.2 Authorization Bypass via User Update API

    lavalite · cms

    High7.1
  • CVE-2025-71177

    LavaLite CMS <= 10.1.0 Stored XSS via Package Creation and Search

    LavaLite · LavaLite CMS

    Medium5.1