Skip to content
OpenAdvisories

Vendor

Qexo

1 known vulnerabilities.

Products

Qexo 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-44828

    Qexo initialization endpoint can reset setup state and expose stored credentials

    Qexo is an open source online editor for static blogs. From 4.0.0 until 4.2.0, Qexo exposes /api/init_step/ through init_step_api without authentication, authorization, or a setup-completion guard. An unauthenticated requester with a valid CSRF token obtained…

    Qexo Qexo