Friendica vulnerabilities
We track 3 vulnerabilities in Friendica products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 11, 2026.
Latest Friendica vulnerabilities
- 9.8 Critical severity
Friendica: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability in Friendica through the 2026.08-dev branch allows unauthenticated remote attackers to execute arbitrary SQL statements via the photo-view order parameter. The parameter is concatenated unescaped into a SHOW COLUMNS query via a b
- 9.8 Critical severity
friendica: Authorization Bypass Through User-Controlled Key
Insecure Permissions vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information and execute arbitrary code via the cid parameter of the calendar event feature.
- 9.1 Critical severity
friendica: Server-Side Request Forgery
Server Side Request Forgery (SSRF) vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary code and obtain sensitive information via the fpostit.php component.