Skip to content
OpenAdvisories

Product · EASYBYTE Software

Konga

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-45221

    Konga < 2.1.0 Privilege Escalation via Hardcoded OpenSSL Path

    Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute arbitrary code by planting attacker-controlled OpenSSL configuration or library files in a hardcoded filesystem path absent from default ins…

    EASYBYTE Software Konga