Products: 2
    Vulnerabilities: 36
    Known Exploited: 0
    0
    Critical Level Threats
    10
    High Level Threats
    16
    Medium Level Threats
    4
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-64870

    MaxKB: UpdateStoreTool fetches caller-supplied app-store URLs without host validation

    Last Modified: Jul 30, 2026
    Published: Jul 30, 2026

    CVE-2026-54149

    MaxKB MCP tool import validation bypass allows post-authentication remote code execution

    Last Modified: Jul 13, 2026
    Published: Jul 10, 2026

    CVE-2026-56779

    MaxKB < 2.10.0 - Server-Side Request Forgery via downloadCallbackUrl and download_url Parameters

    Last Modified: Jul 28, 2026
    Published: Jun 25, 2026

    CVE-2026-42336

    MaxKB: SSRF Bypass via DNS Rebinding in MaxKB OSS URL Fetch

    Last Modified: May 27, 2026
    Published: May 26, 2026

    CVE-2026-42337

    MaxKB: Broken Access Control in MaxKB OSS URL Fetch API

    Last Modified: May 27, 2026
    Published: May 26, 2026
    Items Per Page
    1panel Vulnerabilities & Security CVEs | CVE-DB