Konga vulnerabilities

1 known vulnerability in Konga from EASYBYTE Software. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Konga: Uncontrolled Search Path Element

  CVE-2026-45221Sep 1, 2026EASYBYTE Software

  Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute arbitrary code by planting attacker-controlled OpenSSL configuration or library files in a hardcoded filesystem path absent from default inst