sixstorage vulnerabilities
3 published CVEs name sixstorage among the affected products.
- 3Published CVEs3 of them scored
- 3Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-103883
6Storage Rentals <= 2.31.0 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'six_storage_online_api_url' Option Poisoning + Transient-Backed Auth Bypass
sixstorage · 6Storage Rentals
High8.8 - CVE-2026-15303
6Storage Rentals <= 2.27.0 - Unauthenticated Account Takeover via 'email' Parameter
sixstorage · 6Storage Rentals
Critical9.8 - CVE-2026-9185
6Storage Rentals <= 2.22.0 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Disclosure and Modification via 'userId' Parameter
sixstorage · 6Storage Rentals
High7.5