Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Allegra vulnerabilities

24 published CVEs name Allegra among the affected products.

Published CVEs
24
Last 12 months
2
Critical
7
Known exploited
0

Critical 7High 14Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 202418
  2. 20254
  3. 20262

Newest CVEs

  • CVE-2026-11443

    Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability

    Allegra · Allegra

    Medium4.6
  • CVE-2026-11442

    Allegra exportReport Directory Traversal Information Disclosure Vulnerability

    Allegra · Allegra

    Medium6.5
  • CVE-2025-11466

    Allegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability

    Allegra · Allegra

    Medium4.9
  • CVE-2025-6216

    Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability

    Allegra · Allegra

    Critical9.8
  • CVE-2025-3485

    Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability

    Allegra · Allegra

    High7.2
  • CVE-2025-3486

    Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability

    Allegra · Allegra

    High7.2
  • CVE-2024-5581

    Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability

    Allegra · Allegra

    High7.2
  • CVE-2024-5580

    Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Allegra · Allegra

    High7.2
  • CVE-2024-5579

    Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Allegra · Allegra

    High7.2
  • CVE-2024-30372

    Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability

    Allegra · Allegra

    High8.8