Skip to content
OpenAdvisories

Vendor

elecV2

6 known vulnerabilities.

elecV2 at a glance

Last 12 months
6
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 6 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202660
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

elecV2P 6
All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • High 7.3
    CVE-2026-5016

    elecV2 elecV2P URL mock eAxios server-side request forgery

    A vulnerability was identified in elecV2 elecV2P up to 3.8.3. This affects the function eAxios of the file /mock of the component URL Handler. Such manipulation of the argument req leads to server-side request forgery. It is possible to launch the attack remo…

    elecV2 elecV2P
  • Medium 4.3
    CVE-2026-5015

    elecV2 elecV2P Endpoint logs cross site scripting

    A vulnerability was determined in elecV2 elecV2P up to 3.8.3. The impacted element is an unknown function of the file /logs of the component Endpoint. This manipulation of the argument filename causes cross site scripting. It is possible to initiate the attac…

    elecV2 elecV2P
  • Medium 5.3
    CVE-2026-5014

    elecV2 elecV2P Wildcard log path.join path traversal

    A vulnerability was found in elecV2 elecV2P up to 3.8.3. The affected element is the function path.join of the file /log/ of the component Wildcard Handler. The manipulation results in path traversal. The attack may be performed from remote. The exploit has b…

    elecV2 elecV2P
  • Medium 5.3
    CVE-2026-5013

    elecV2 elecV2P :key path.join path traversal

    A vulnerability has been found in elecV2 elecV2P up to 3.8.3. Impacted is the function path.join of the file /store/:key. The manipulation of the argument URL leads to path traversal. The attack is possible to be carried out remotely. The exploit has been dis…

    elecV2 elecV2P
  • High 7.3
    CVE-2026-5012

    elecV2 elecV2P rpc pm2run os command injection

    A flaw has been found in elecV2 elecV2P up to 3.8.3. This issue affects the function pm2run of the file /rpc. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The p…

    elecV2 elecV2P
  • Medium 6.3
    CVE-2026-5011

    elecV2 elecV2P JSON webhook runJSFile code injection

    A vulnerability was detected in elecV2 elecV2P up to 3.8.3. This vulnerability affects the function runJSFile of the file /webhook of the component JSON Parser. Performing a manipulation of the argument rawcode results in code injection. Remote exploitation o…

    elecV2 elecV2P