CyberSecBulletin

NukeViet vulnerabilities

We track 2 vulnerabilities in NukeViet products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 22, 2026.

2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score

Latest NukeViet vulnerabilities

  • 8.7 High severity

    nukeviet: Improper Neutralization of Input During Web Page Generation

    CVE-2026-41147NukeViet

    NukeViet CMS is a multi Content Management System. Versions 4.5.07 and prior contain a Stored Cross-Site Scripting (XSS) vulnerability caused by insufficient server-side input sanitization in the Request class. The application relies primarily on client-side f

  • 8.8 High severity

    nukeviet: Deserialization of Untrusted Data

    CVE-2024-36528NukeViet

    nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization vulnerability which results in code execution via /admin/extensions/download.php and /admin/extensions/upload.php.