MHSanaei vulnerabilities
We track 2 vulnerabilities in MHSanaei products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 25, 2026.
2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score
Latest MHSanaei vulnerabilities
- 7.2 High severity
3x-ui: External Control of File Name or Path
3X-UI is a web control panel for managing Xray-core servers. Prior to 3.3.1, an authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. T
- 9.8 Critical severity
3x-ui: Improper Certificate Validation
An issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute arbitrary code via the management script x-ui passes the no check certificate option to wget when downloading updates