pheditor vulnerabilities
4 published CVEs name pheditor among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 2Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-55579
Pheditor: Hardcoded default password 'admin' with no forced change enables full application compromise
pheditor · pheditor
Critical9.8 - CVE-2026-55578
Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection
pheditor · pheditor
High8.8 - CVE-2026-54540
Authenticated terminal command whitelist bypass in Pheditor
pheditor · pheditor
High8.8 - CVE-2026-48030
Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter (CWE-78)
pheditor · pheditor
Critical9.9