RansomLook vulnerabilities
14 published CVEs name RansomLook among the affected products.
- 14Published CVEs14 of them scored
- 14Last 12 monthspublished in the last year
- 4Critical8 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-78555
RansomLook API Key Disclosure Through /admin/apikeys HTML Source
ransomlook · ransomlook
Critical9.4 - CVE-2026-78553
Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLook
ransomlook · ransomlook
High7.0 - CVE-2026-78551
RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts
ransomlook · ransomlook
High8.8 - CVE-2026-78391
Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLook
ransomlook · ransomlook
High8.8 - CVE-2026-78387
RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification
ransomlook · ransomlook
Critical9.4 - CVE-2026-78386
Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook API
ransomlook · ransomlook
High8.7 - CVE-2026-78385
RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access
ransomlook · ransomlook
High8.2 - CVE-2026-78381
RansomLook Arbitrary File Read via Path Traversal in Post screen Field
ransomlook · ransomlook
High8.2 - CVE-2026-78380
Private Group and Market Posts Disclosed Through Public Notification Channels in RansomLook
ransomlook · ransomlook
High8.7 - CVE-2026-78378
Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Data
ransomlook · ransomlook
Medium6.9