rommapp romm vulnerabilities

Newest CVEs

• CVE-2025-65097

  Insecure Direct Object Reference (IDOR) Allows Unauthorized Deletion of User Collections

  rommapp · romm

  High7.1
• CVE-2025-65096

  RomM Insecure Direct Object Reference (IDOR) Allows Unauthorized Access to Private Collections

  rommapp · romm

  Medium5.3
• CVE-2025-65027

  RomM Chained XSS and CSRF Vulnerabilities Enable Admin Account Takeover

  rommapp · romm

  High7.6
• CVE-2025-54071

  RomM's authenticated arbitrary file write vulnerability can lead to Remote Code Execution

  rommapp · romm

  Critical9.4
• CVE-2025-53908

  RomM vulnerable to Authenticated Path Traversal

  rommapp · romm

  High8.3