Skip to content
OpenAdvisories

Vendor

microweber

87 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-65694 Public exploit

    Microweber CMS 2.0.20 Path Traversal via ServeStaticFileController

    Microweber CMS through 2.0.20 contains a path traversal vulnerability in the static file controller that allows unauthenticated remote attackers to read arbitrary files by supplying directory traversal sequences in the path query parameter. Attackers can send…

  • High 8.1
    CVE-2022-0557 Public exploit EPSS 51%

    OS Command Injection in microweber/microweber

    OS Command Injection in Packagist microweber/microweber prior to 1.2.11.