Feng Office vulnerabilities

2 known vulnerabilities in Feng Office from Fengoffice. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Feng Office: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-90495Sep 13, 2026Fengoffice

  A vulnerability has been found in Fengoffice Feng Office up to 3.11.13.11. This impacts the function Contacts::instance->findAll of the file application/models/CompanyWebsite.class.php of the component Legacy API. Such manipulation of the argument auth leads t

• 8.1 High severity

  Feng Office: Externally Controlled Reference to a Resource in Another Sphere

  CVE-2025-5877Jun 9, 2025Fengoffice

  A vulnerability, which was classified as problematic, has been found in Fengoffice Feng Office 3.2.2.1. Affected by this issue is some unknown functionality of the file /application/models/ApplicationDataObject.class.php of the component Document Upload Handle