vito vulnerabilities

1 known vulnerability in vito from Vitodeploy. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  vito: Missing Authorization

  CVE-2026-29789Mar 6, 2026Vitodeploy

  Vito is a self-hosted web application that helps manage servers and deploy PHP applications into production servers. Prior to version 3.20.3, a missing authorization check in workflow site-creation actions allows an authenticated attacker with workflow write a