Skip to content
OpenAdvisories

Vendor

Pachno

6 known vulnerabilities.

Products

Pachno 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-40041

    Pachno 1.0.6 Cross-Site Request Forgery via State-Changing Endpoints

    Pachno 1.0.6 contains a cross-site request forgery vulnerability that allows attackers to perform arbitrary actions in authenticated user context by exploiting missing CSRF protections on state-changing endpoints. Attackers can craft malicious requests target…

    Pachno Pachno
  • Medium 6.5
    CVE-2026-40039

    Pachno 1.0.6 Open Redirection via return_to Parameter

    Pachno 1.0.6 contains an open redirection vulnerability that allows attackers to redirect users to arbitrary external websites by manipulating the return_to parameter. Attackers can craft malicious login URLs with unvalidated return_to values to conduct phish…

    Pachno Pachno