elunez eladmin vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20259
3. 20265

Newest CVEs

• CVE-2026-111604

  eladmin through 2.7 Broken Access Control via /api/users Update and Delete

  elunez · eladmin

  Medium5.1
• CVE-2026-108706

  eladmin through commit 55fbf70 Missing Authorization via S3 Storage Download Endpoint

  elunez · eladmin

  Medium5.3
• CVE-2026-108688

  Eladmin through 2.7 Missing Authorization via /api/localStorage/pictures Upload

  elunez · eladmin

  Medium5.3
• CVE-2026-77036

  elunez eladmin GenConfigController improper authorization

  elunez · eladmin

  Medium5.3
• CVE-2026-10550

  elunez eladmin Application Deployment App.java command injection

  elunez · eladmin

  Medium5.3
• CVE-2025-10084

  elunez eladmin SysLogController 1 queryErrorLogDetail improper authorization

  elunez · eladmin

  Medium5.3
• CVE-2025-10014

  elunez eladmin Email Address updateEmail updateUserEmail improper authorization

  elunez · eladmin

  Low2.3
• CVE-2025-9937

  elunez eladmin LocalStorageController deleteFile improper authorization

  elunez · eladmin

  Medium5.3
• CVE-2025-9241

  elunez eladmin exportUser csv injection

  elunez · eladmin

  Medium5.3
• CVE-2025-9240

  elunez eladmin info information disclosure

  elunez · eladmin

  Medium5.3