By-night vulnerabilities
We track 1 vulnerability in By-night products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2025.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest By-night vulnerabilities
- 8.8 High severity
Sms: Unrestricted Upload of File with Dangerous Type
by-night sms V1.0 has an Arbitrary File Upload vulnerability. The /api/sms/upload/headImg endpoint allows uploading arbitrary files. Users can upload files of any size and type.