Smanga
2 CVEs
product
Monthly
Auth bypass in Smanga 3.2.7 allows unauthenticated password reset for any user including admin.
PHP
Authentication Bypass
Smanga
NVD
GitHub
CVSS 3.1
9.4
EPSS
0.1%
RCE in Smanga 3.2.7 via command injection in /php/path/rescan.php. EPSS 0.29%.
PHP
RCE
Smanga
NVD
GitHub
CVSS 3.1
9.8
EPSS
0.3%
CVE-2025-70833
EPSS 0%
CVSS 9.4
CRITICAL
Act Now
Auth bypass in Smanga 3.2.7 allows unauthenticated password reset for any user including admin.
PHP
Authentication Bypass
Smanga
NVD
GitHub
CVE-2025-70831
EPSS 0%
CVSS 9.8
CRITICAL
Act Now
RCE in Smanga 3.2.7 via command injection in /php/path/rescan.php. EPSS 0.29%.
PHP
RCE
Smanga
NVD
GitHub