CVE-2026-116057

A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown functionality of the file app/controller/editor.class.php of the component Online Editor Save Endpoint. Such manipulation of the argument path/filestr leads to unrestricted upload. It i...

CVE-2026-116056

A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is the function requesturlsafe of the file app/function/web.function.php of the component Remote Download. This manipulation causes server-side request forgery. It is possible to initiate the attack remotely. The vendor was...

CVE-2026-116057 KodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload

A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown functionality of the file app/controller/editor.class.php of the component Online Editor Save Endpoint. Such manipulation of the argument path/filestr leads to unrestricted upload. It i...

CVE-2026-116057

KodCloud KodExplorer (versions up to 4.55 ) is vulnerable to an unrestricted upload flaw in the Online Editor Save Endpoint component. The vulnerability exists within the app/controller/editor.class.php file, where the manipulation of the path/filestr argument allows for remote file uploads. The ...

EUVD-2026-109551

A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown functionality of the file app/controller/editor.class.php of the component Online Editor Save Endpoint. Such manipulation of the argument path/filestr leads to unrestricted upload. It i...

CVE-2026-116056 KodCloud KodExplorer Remote Download web.function.php request_url_safe server-side request forgery

A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is the function requesturlsafe of the file app/function/web.function.php of the component Remote Download. This manipulation causes server-side request forgery. It is possible to initiate the attack remotely. The vendor was...

CVE-2026-116056

A server-side request forgery (SSRF) vulnerability exists in KodCloud KodExplorer up to version 4.56 . The flaw is located in the request_url_safe function within the file app/function/web.function.php of the Remote Download component. An attacker can initiate this attack remotely to manipulate r...

EUVD-2026-109550

A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is the function requesturlsafe of the file app/function/web.function.php of the component Remote Download. This manipulation causes server-side request forgery. It is possible to initiate the attack remotely. The vendor was...

CVE-2026-6571

A weakness has been identified in kodcloud KodExplorer up to 4.52. Affected by this vulnerability is the function roleGroupAction of the file /app/controller/systemRole.class.php. Executing a manipulation of the argument grouprole can lead to authorization bypass. The attack may be launched...

CVE-2026-6570

A security flaw has been discovered in kodcloud KodExplorer up to 4.52. Affected is the function initInstall of the file /app/controller/systemMember.class.php. Performing a manipulation of the argument path results in authorization bypass. The attack may be initiated remotely. The exploit has be...

CVE-2026-6568

A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.class.php::initShareOld of the file /app/controller/share.class.php of the component Public Share Handler. This manipulation of the argument path causes path traversal. The attack can be initiated...

EUVD-2026-23695

A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet of the file /app/controller/share.class.php of the component fileGet Endpoint. Such manipulation of the argument fileUrl leads to improper authentication. The attack can be launched remotely. The...

EUVD-2026-23694

A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.class.php::initShareOld of the file /app/controller/share.class.php of the component Public Share Handler. This manipulation of the argument path causes path traversal. The attack can be initiated...

CVE-2026-6570 kodcloud KodExplorer systemMember.class.php initInstall authorization

A security flaw has been discovered in kodcloud KodExplorer up to 4.52. Affected is the function initInstall of the file /app/controller/systemMember.class.php. Performing a manipulation of the argument path results in authorization bypass. The attack may be initiated remotely. The exploit has be...

CVE-2026-6570

CVE-2026-6570 affects kodcloud KodExplorer up to version 4.52. The vulnerability is in the function initInstall of /app/controller/systemMember.class.php. A manipulation of the path argument allows an authorization bypass, with the attack potentially executable remotely. The exploit has been rele...

CVE-2026-6569

A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet of the file /app/controller/share.class.php of the component fileGet Endpoint. Such manipulation of the argument fileUrl leads to improper authentication. The attack can be launched remotely. The...

CVE-2026-6569

CVE-2026-6569 concerns kodcloud KodExplorer (up to version 4.52) and the fileGet Endpoint within the module /app/controller/share.class.php. The vulnerability stems from manipulated input in the fileUrl argument of the fileGet function, which leads to improper authentication. Exploitation is desc...

CVE-2026-6569 kodcloud KodExplorer fileGet Endpoint share.class.php improper authentication

A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet of the file /app/controller/share.class.php of the component fileGet Endpoint. Such manipulation of the argument fileUrl leads to improper authentication. The attack can be launched remotely. The...

CVE-2026-6568

Kodcloud KodExplorer

CVE-2026-6571: Authorization Bypass Through User-Controlled Key

A weakness has been identified in kodcloud KodExplorer up to 4.52. Affected by this vulnerability is the function roleGroupAction of the file /app/controller/systemRole.class.php. Executing a manipulation of the argument grouprole can lead to authorization bypass. The attack may be launched...