Skip to content
OpenAdvisories

Vendor

Manager-io

2 known vulnerabilities.

Products

Manager 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-64180

    Manager-io/Manager: Complete Bypass of SSRF Protection via Time-of-Check Time-of-Use (TOCTOU)

    Manager-io/Manager is accounting software. In Manager Desktop and Server versions 25.11.1.3085 and below, a critical vulnerability permits unauthorized access to internal network resources. The flaw lies in the fundamental design of the DNS validation mechani…

    Manager-io Manager
  • Critical 10.0
    CVE-2025-54122

    Manager-io/Manager allows unauthenticated full read server-side request forgery in "proxy" endpoint

    Manager-io/Manager is accounting software. A critical unauthenticated full read Server-Side Request Forgery (SSRF) vulnerability has been identified in the proxy handler component of both manager Desktop and Server edition versions up to and including 25.7.18…

    Manager-io Manager