CyberSecBulletin

KodCloud vulnerabilities

We track 3 vulnerabilities in KodCloud products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 19, 2026.

3vulnerabilities
1critical
2high
0exploited
8.1average CVSS score

Latest KodCloud vulnerabilities

  • 7.3 High severity

    KodExplorer: Improper Authentication

    CVE-2026-6569KodCloud

    A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet of the file /app/controller/share.class.php of the component fileGet Endpoint. Such manipulation of the argument fileUrl leads to improper authentication. The

  • 7.3 High severity

    KodExplorer: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-6568KodCloud

    A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.class.php::initShareOld of the file /app/controller/share.class.php of the component Public Share Handler. This manipulation of the argument path causes path tra

  • 9.8 Critical severity

    Kodbox: Improper Restriction of Excessive Authentication Attempts

    CVE-2023-48028KodCloudEPSS 1.11%

    kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack.