← All credits
Special thanks to William Bastos (@chor4o) and Samara Gama (igobysamy) for reporting this vulnerability
6 vulnerability records and advisories credit this contributor.
CVE-2026-78358
Cross-Site Request Forgery in Administrative Actions
CVE-2026-48211
Cross-Site Request Forgery in Import/Export Admin console
CVE-2026-48212
Stored XSS in external pages
CVE-2026-78355
Path Traversal in SendSupportBundle allows File Deletion Outside the Intended Directory
CVE-2026-78356
Unauthenticated Disclosure of Agent Frontend Configuration
CVE-2026-78357
Insufficient Session Revocation for JWT Authentication