Skip to content
OpenAdvisories

Product · Part-DB

Part-DB-server

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2026-54630

    Part-DB: Authenticated RCE via .phar attachment upload served from public/media

    Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the part attachment upload handler stores uploaded files under the web-served media directory using the client-supplied file extension, and its extension…

    Part-DB Part-DB-server