Pachno vulnerabilities
We track 4 vulnerabilities in Pachno products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on April 13, 2026.
Latest Pachno vulnerabilities
- 9.8 Critical severity
Pachno: Deserialization of Untrusted Data
Pachno 1.0.6 contains a deserialization vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting malicious serialized objects into cache files. Attackers can write PHP object payloads to world-writable cache files with predict
- 9.8 Critical severity
Pachno: Exposure of File Descriptor to Unintended Control Sphere
Pachno 1.0.6 contains an XML external entity injection vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting unsafe XML parsing in the TextParser helper. Attackers can inject malicious XML entities through wiki table syntax
- 8.8 High severity
Pachno: Unrestricted Upload of File with Dangerous Type
Pachno 1.0.6 contains an unrestricted file upload vulnerability that allows authenticated users to upload arbitrary file types by bypassing ineffective extension filtering to the /uploadfile endpoint. Attackers can upload executable files .php5 scripts to web-
- 7.2 High severity
Pachno: Improper Neutralization of Input During Web Page Generation
Pachno 1.0.6 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious payloads into POST parameters. Attackers can inject scripts through the value, comment_body, article_conten