Grandnode

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 4
    Known Exploited: 0
    0
    Critical Level Threats
    1
    High Level Threats
    1
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-112249

    grandnode grandnode2 Product Description Product.Layout.Simple.cshtml Html.Raw cross site scripting

    Last Modified: Oct 22, 2026
    Published: Oct 19, 2026

    CVE-2026-112248

    grandnode grandnode2 Excel Import ProductImportDataObject.PrepareProductPictures path traversal

    Last Modified: Oct 20, 2026
    Published: Oct 19, 2026

    CVE-2025-10216

    GrandNode Voucher ConfirmOrder race condition

    Last Modified: Apr 15, 2026
    Published: Sep 10, 2025

    CVE-2019-12276

    A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthenticated attackers to retrieve arbitrary files on the web server via specially crafted LetsEncrypt/Index?fileName= HTTP requests. A patch for this issue was made on 2019-05-30 in GrandNode 4.40.

    Last Modified: Nov 21, 2024
    Published: Jun 05, 2019
    Items Per Page
    Grandnode Vulnerabilities & Security CVEs | CVE-DB