CyberSecBulletin

Lkw199711 vulnerabilities

We track 2 vulnerabilities in Lkw199711 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 20, 2026.

2vulnerabilities
2critical
0high
0exploited
9.6average CVSS score

Latest Lkw199711 vulnerabilities

  • 9.4 Critical severity

    Smanga: Improper Authentication

    CVE-2025-70833Lkw199711

    An Authentication Bypass vulnerability in Smanga 3.2.7 allows an unauthenticated attacker to reset the password of any user (including the administrator) and fully takeover the account by manipulating POST parameters. The issue stems from insecure permission v

  • 9.8 Critical severity

    Smanga: Improper Neutralization of Special Elements used in an OS Command

    CVE-2025-70831Lkw199711EPSS 1.04%

    A Remote Code Execution (RCE) vulnerability was found in Smanga 3.2.7 in the /php/path/rescan.php interface. The application fails to properly sanitize user-supplied input in the mediaId parameter before using it in a system shell command. This allows an unaut