aces vulnerabilities

Newest CVEs

• CVE-2026-55146

  LORIS has incorrect access checks in issue_tracker

  aces · Loris

  Medium4.3
• CVE-2026-55147

  LORIS has incorrect access checks in API for Imaging Browser

  aces · Loris

  Medium6.3
• CVE-2026-39985

  LORIS has an open redirect field on login

  aces · Loris

  Medium4.3
• CVE-2026-35446

  LORIS has a path traversal in FilesDownloadHandler

  aces · Loris

  High7.7
• CVE-2026-35403

  LORIS has potential cross-site scripting in survey_accounts module

  aces · Loris

  Medium6.5
• CVE-2026-35400

  LORIS incorrectly trusts user input in publication module

  aces · Loris

  Low3.5
• CVE-2026-35169

  LORIS has potential cross-site scripting in help_editor module

  aces · Loris

  High8.7
• CVE-2026-35165

  LORIS has incorrect access checks in document_repository

  aces · Loris

  Medium6.3
• CVE-2026-34985

  LORIS has incorrect access checks in media module

  aces · Loris

  Medium6.3
• CVE-2026-34392

  LORIS has a path traversal in static router

  aces · Loris

  High7.5