Manager-io vulnerabilities
We track 2 vulnerabilities in Manager-io products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2025.
2vulnerabilities
2critical
0high
0exploited
10.0average CVSS score
Latest Manager-io vulnerabilities
- 10.0 Critical severity
Manager: Time-of-check Time-of-use (TOCTOU) Race Condition
Manager-io/Manager is accounting software. In Manager Desktop and Server versions 25.11.1.3085 and below, a critical vulnerability permits unauthorized access to internal network resources. The flaw lies in the fundamental design of the DNS validation mechanis
- 10.0 Critical severity
Manager: Server-Side Request Forgery
Manager-io/Manager is accounting software. A critical unauthenticated full read Server-Side Request Forgery (SSRF) vulnerability has been identified in the proxy handler component of both manager Desktop and Server edition versions up to and including 25.7.18.