CyberSecBulletin

Lanol vulnerabilities

We track 2 vulnerabilities in Lanol products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 19, 2025.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Lanol vulnerabilities

  • 7.5 High severity

    Filecodebox: Authentication Bypass by Primary Weakness

    CVE-2025-51663Lanol

    A vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote attackers to bypass ip-based rate limit protection and failed attempt restrictions by faking X-Real-IP and X-Forwarded-For HTTP headers. This can enable attackers to per

  • 7.5 High severity

    Filecodebox: Path Traversal: '../filedir'

    CVE-2025-51661Lanol

    A path Traversal vulnerability found in FileCodeBox v2.2 and earlier allows arbitrary file writes when application is configured to use local filesystem storage. SystemFileStorage.save_file method in core/storage.py uses filenames from user input without valid