Allskyteam vulnerabilities
We track 2 vulnerabilities in Allskyteam products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 16, 2025.
2vulnerabilities
1critical
1high
0exploited
9.4average CVSS score
Latest Allskyteam vulnerabilities
- 10.0 Critical severity
Allsky: Improper Limitation of a Pathname to a Restricted Directory
A Path Traversal vulnerability in the Allsky WebUI version v2024.12.06_06 allows an unauthenticated remote attacker to achieve arbitrary command execution. By sending a crafted HTTP request to the /html/execute.php endpoint with a malicious payload in the id p
- 8.8 High severity
Allsky: Cross-Site Request Forgery
Cross Site Request Forgery (CSRF) vulnerability in AllskyTeam AllSky v2024.12.06_06 allows remote attackers to cause a denial of service via function handle_interface_POST_and_status.