Skip to content
OpenAdvisories

Vendor

lavalite

3 known vulnerabilities.

Products

cms 2 LavaLite CMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-113358

    LavaLite CMS through 10.1.2 Missing Authentication via Filer Download Routes

    LavaLite CMS through 10.1.2 contains a missing authentication vulnerability in the Filer module that allows unauthenticated attackers to download stored files through the filer/download and filer/display routes. Attackers can supply arbitrary disk names and p…

    lavalite cms