Skip to content
OpenAdvisories

Vendor

picosh

1 known vulnerabilities.

Products

pico 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-125367

    Pico through 4.1.2 SSRF in Feeds Service via run SSH Command

    Pico through 4.1.2 contains a server-side request forgery vulnerability in the feeds service that allows signed-up users to make the server fetch arbitrary URLs via the run SSH command. Attackers can upload a feeds digest post listing internal URLs and trigge…

    picosh pico