Skip to content

Vendor

cskefu vulnerabilities

3 published CVES affecting cskefu, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
1
Medium
2
Low
0
Unscored
0
CISA KEV
0
Atom feed of cskefu alerts

Products

Latest cskefu CVEs

Newest publication first

  1. CVE-2026-2557 cskefu File Upload MediaController.java upload cross site scripting

    Published
    MediumCVSS 5.1 EPSS 0.27%

    A vulnerability was detected in cskefu up to 8.0.1. Impacted is the function Upload of the file com/cskefu/cc/controller/resource/MediaController.java of the component File Upload. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit...

  2. CVE-2026-2556 cskefu Endpoint MediaController.java server-side request forgery

    Published
    MediumCVSS 5.3 EPSS 0.35%

    A security vulnerability has been detected in cskefu up to 8.0.1. This issue affects some unknown processing of the file com/cskefu/cc/controller/resource/MediaController.java of the component Endpoint. The manipulation of the argument url leads to server-side request forgery. Th...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.