CyberSecBulletin

Forceu vulnerabilities

We track 1 vulnerability in Forceu products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 6, 2026.

1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score

Latest Forceu vulnerabilities

  • 8.7 High severity

    Gokapi: Improper Neutralization of Input During Web Page Generation

    CVE-2026-28683Forceu

    Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, if a malicious authenticated user uploads SVG and creates a hotlink for it, they can achieve stored XSS. This issue has been patched in versio