ISPConfig vulnerabilities

3 published CVEs name ISPConfig among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 1
Critical: 1
Known exploited: 0

Critical 1High 2Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

20202
20261

Newest CVEs

CVE-2026-61518
ISPConfig Authenticated SQL Injection via Remote API primary_id Parameter
ispconfig · ispconfig3
High8.7
CVE-2013-3629
ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution
ISPConfig · ISPConfig
High8.8
CVE-2012-2087
ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client interface.
ISPConfig · ISPConfig
Critical9.8

Products with the most CVEs

Most common weaknesses