Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Dulldusk vulnerabilities

4 published CVEs name Dulldusk among the affected products.

All 4 in the listAtom feed of new CVEs
Published CVEs
4
Last 12 months
3
Critical
3
Known exploited
0

Critical 3High 0Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20241
  2. 20251
  3. 20262

Newest CVEs

  • CVE-2026-72593

    dulldusk phpfm - Missing Authentication by Default Allows Full Filesystem Access

    dulldusk · phpfm

    Critical9.8
  • CVE-2026-72592

    dulldusk phpfm - Unauthenticated Remote Code Execution via Unrestricted PHP File Upload

    dulldusk · phpfm

    Critical9.8
  • CVE-2023-53894

    phpfm 1.7.9 Authentication Bypass via Type Juggling Vulnerability

    Dulldusk · phpfm

    Critical9.3
  • CVE-2024-5673

    Cross-Site Scripting in PHP File Manager by Dulldusk

    Dulldusk · PHP File Manager

    Medium6.1

Products with the most CVEs

  1. phpfm3
  2. PHP File Manager1

Most common weaknesses

  1. CWE-1390 1
  2. CWE-306 Missing authentication for a critical function1
  3. CWE-434 Unrestricted file upload1
  4. CWE-79 Cross-site scripting (XSS)1