Products: 2
Vulnerabilities: 15
Known Exploited: 0
0
Critical Level Threats
1
High Level Threats
14
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-57183
Scoold: Forged JWT Accepted as Admin API Token Allowing Unauthorized Access to Sensitive Configuration and Logs
Last Modified: Oct 28, 2026
Published: Oct 15, 2026
CVE-2026-55840
Scoold: Open Redirect in getBackToUrl() allows phishing via domain-prefix startsWith bypass
Last Modified: Oct 23, 2026
Published: Oct 15, 2026
CVE-2026-55842
Scoold: CORS wildcard origin with credentials enabled allows cross-origin authenticated API access from any domain
Last Modified: Oct 23, 2026
Published: Oct 15, 2026
CVE-2026-54676
Scoold: GET /api/posts/{id}/answers leaks private-space replies when personal API tokens are enabled
Last Modified: Sep 19, 2026
Published: Sep 17, 2026
CVE-2026-54677
Scoold: Authenticated user can post replies and comments to private-space questions without space membership
Last Modified: Sep 24, 2026
Published: Sep 17, 2026
Items Per Page
