Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Atutor vulnerabilities

16 published CVEs name Atutor among the affected products.

All 16 in the listAtom feed of new CVEs
Published CVEs
16
Last 12 months
16
Critical
0
Known exploited
0

Critical 0High 3Medium 12Low 1Not scored 0

Newest CVEs

  • CVE-2026-64972

    Reflected XSS in ATutor

    ATutor · ATutor

    Medium4.8
  • CVE-2026-64971

    Reflected XSS in ATutor

    ATutor · ATutor

    Medium4.8
  • CVE-2026-64970

    Stored XSS in ATutor

    ATutor · ATutor

    Medium5.1
  • CVE-2026-64969

    Insecure Direct Object Reference in ATutor

    ATutor · ATutor

    Medium5.3
  • CVE-2026-64968

    Server-Side Request Forgery in ATutor

    ATutor · ATutor

    Medium5.1
  • CVE-2026-64967

    Path Traversal in ATutor

    ATutor · ATutor

    Medium6.9
  • CVE-2026-64966

    Path Traversal leading to Remote Code Execution in ATutor

    ATutor · ATutor

    High8.7
  • CVE-2026-64965

    Missing Authorization Check in ATutor

    ATutor · ATutor

    Medium5.3
  • CVE-2026-64964

    Generation of Predictable Email Confirmation Token in ATutor

    ATutor · ATutor

    Medium6.3
  • CVE-2026-64963

    Path Traversal in ATutor

    ATutor · ATutor

    Low2.3

Products with the most CVEs

  1. ATutor16

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)5
  2. CWE-22 Path traversal3
  3. CWE-639 Authorization bypass through a user-controlled key (IDOR)2
  4. CWE-340 1
  5. CWE-352 Cross-site request forgery (CSRF)1
  6. CWE-434 Unrestricted file upload1
  7. CWE-862 Missing authorization1
  8. CWE-89 SQL injection1
  9. CWE-918 Server-side request forgery (SSRF)1