Privatebin

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 8
    Known Exploited: 0
    0
    Critical Level Threats
    1
    High Level Threats
    5
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-55891

    PrivateBin: Reflected JSON injection in backend responses via unescaped REQUEST_URI

    Last Modified: Aug 31, 2026
    Published: Aug 28, 2026

    CVE-2026-55696

    PrivateBin: Stored Cross-Side-Scripting (XSS) vulnerability in attachment download link via dangerous MIME types with required user-interaction

    Last Modified: Aug 31, 2026
    Published: Aug 28, 2026

    CVE-2025-64714

    PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal

    Last Modified: Apr 15, 2026
    Published: Nov 13, 2025

    CVE-2025-64711

    PrivateBin vulnerable to malicious filename use for self-XSS / HTML injection locally for users

    Last Modified: Nov 25, 2025
    Published: Nov 13, 2025

    CVE-2025-62796

    PrivateBin persistent HTML injection in attachment filename enables redirect and defacement

    Last Modified: Apr 15, 2026
    Published: Oct 28, 2025
    Items Per Page