Eladmin

10 CVEs product

Monthly

CVE-2025-70997 MEDIUM POC This Month

A vulnerability has been discovered in eladmin v2.7 and before. This vulnerability allows for an arbitrary user password reset under any user permission level. [CVSS 6.5 MEDIUM]

Authentication Bypass Eladmin
NVD GitHub
CVSS 3.1
6.5
EPSS
0.0%
CVE-2025-10084 MEDIUM This Month

A vulnerability was identified in elunez eladmin up to 2.7. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Eladmin
NVD VulDB
CVSS 4.0
5.3
EPSS
0.0%
CVE-2025-10014 LOW Monitor

A flaw has been found in elunez eladmin up to 2.7. Rated low severity (CVSS 2.3), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Eladmin
NVD VulDB
CVSS 4.0
2.3
EPSS
0.0%
CVE-2025-9241 MEDIUM POC This Month

A weakness has been identified in elunez eladmin up to 2.7. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Code Injection Eladmin
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.0%
CVE-2025-9240 MEDIUM POC This Month

A security flaw has been discovered in elunez eladmin up to 2.7. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Eladmin
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.0%
CVE-2025-9239 MEDIUM POC This Month

A vulnerability was identified in elunez eladmin up to 2.7. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Java Eladmin
NVD GitHub VulDB
CVSS 4.0
6.3
EPSS
0.0%
CVE-2025-8530 MEDIUM POC This Month

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Eladmin
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.0%
CVE-2025-3250 MEDIUM This Month

A vulnerability, which was classified as problematic, has been found in elunez eladmin 2.7. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Deserialization Eladmin
NVD VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-2855 MEDIUM POC This Month

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Deserialization Eladmin
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
1.0%
CVE-2025-22978 CRITICAL POC Act Now

eladmin <=2.7 is vulnerable to CSV Injection in the exception log download module. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Code Injection Eladmin
NVD GitHub
CVSS 3.1
9.8
EPSS
0.5%
CVE-2025-70997
EPSS 0% CVSS 6.5
MEDIUM POC This Month

A vulnerability has been discovered in eladmin v2.7 and before. This vulnerability allows for an arbitrary user password reset under any user permission level. [CVSS 6.5 MEDIUM]

Authentication Bypass Eladmin
NVD GitHub
CVE-2025-10084
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability was identified in elunez eladmin up to 2.7. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Eladmin
NVD VulDB
CVE-2025-10014
EPSS 0% CVSS 2.3
LOW Monitor

A flaw has been found in elunez eladmin up to 2.7. Rated low severity (CVSS 2.3), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Eladmin
NVD VulDB
CVE-2025-9241
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A weakness has been identified in elunez eladmin up to 2.7. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Code Injection Eladmin
NVD GitHub VulDB
CVE-2025-9240
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A security flaw has been discovered in elunez eladmin up to 2.7. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Eladmin
NVD GitHub VulDB
CVE-2025-9239
EPSS 0% CVSS 6.3
MEDIUM POC This Month

A vulnerability was identified in elunez eladmin up to 2.7. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Java Eladmin
NVD GitHub VulDB
CVE-2025-8530
EPSS 0% CVSS 5.5
MEDIUM POC This Month

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Eladmin
NVD GitHub VulDB
CVE-2025-3250
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability, which was classified as problematic, has been found in elunez eladmin 2.7. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Deserialization Eladmin
NVD VulDB
CVE-2025-2855
EPSS 1% CVSS 5.1
MEDIUM POC This Month

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Deserialization Eladmin
NVD GitHub VulDB
CVE-2025-22978
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

eladmin <=2.7 is vulnerable to CSV Injection in the exception log download module. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Code Injection Eladmin
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy