Skip to content
OpenAdvisories

Vendor

MarkUsProject

8 known vulnerabilities.

Products

Markus 8
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-25057 Public exploit

    Zip Slip in MarkUs config upload allowing RCE

    MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, instructors are able to upload a zip file to create an assignment from an exported configuration (courses/<:course_id>/assignments/upload_config_files). The upl…

    MarkUsProject Markus