Kodbox

3 CVEs product

Monthly

CVE-2026-1066 MEDIUM This Month

Kodbox versions up to 1.61.10 contain a command injection vulnerability in the compression handler component that allows authenticated remote attackers to execute arbitrary commands with network access. Public exploit code exists for this vulnerability, and no patch is currently available from the vendor.

Command Injection Kodbox
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.3%
CVE-2025-10233 MEDIUM This Month

A security vulnerability has been detected in kalcaddle kodbox 1.61. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Path Traversal Kodbox
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-9414 MEDIUM This Month

A vulnerability was found in kalcaddle kodbox 1.61. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SSRF Kodbox
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.0%
CVE-2026-1066
EPSS 0% CVSS 6.3
MEDIUM This Month

Kodbox versions up to 1.61.10 contain a command injection vulnerability in the compression handler component that allows authenticated remote attackers to execute arbitrary commands with network access. Public exploit code exists for this vulnerability, and no patch is currently available from the vendor.

Command Injection Kodbox
NVD GitHub VulDB
CVE-2025-10233
EPSS 0% CVSS 5.3
MEDIUM This Month

A security vulnerability has been detected in kalcaddle kodbox 1.61. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Path Traversal Kodbox
NVD GitHub VulDB
CVE-2025-9414
EPSS 0% CVSS 5.1
MEDIUM This Month

A vulnerability was found in kalcaddle kodbox 1.61. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SSRF Kodbox
NVD GitHub VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy