Skip to content

Vendor

elecV2 vulnerabilities

6 published CVES affecting elecV2, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
6
Critical
0
High
0
Medium
6
Low
0
Unscored
0
CISA KEV
0
Atom feed of elecV2 alerts

Products

Latest elecV2 CVEs

Newest publication first

  1. CVE-2026-5016 elecV2 elecV2P URL mock eAxios server-side request forgery

    Published
    MediumCVSS 6.9 EPSS 0.31%

    A vulnerability was identified in elecV2 elecV2P up to 3.8.3. This affects the function eAxios of the file /mock of the component URL Handler. Such manipulation of the argument req leads to server-side request forgery. It is possible to launch the attack remotely. The exploit is...

  2. CVE-2026-5015 elecV2 elecV2P Endpoint logs cross site scripting

    Published
    MediumCVSS 5.3 EPSS 0.27%

    A vulnerability was determined in elecV2 elecV2P up to 3.8.3. The impacted element is an unknown function of the file /logs of the component Endpoint. This manipulation of the argument filename causes cross site scripting. It is possible to initiate the attack remotely. The explo...

  3. CVE-2026-5014 elecV2 elecV2P Wildcard log path.join path traversal

    Published
    MediumCVSS 6.9 EPSS 0.46%

    A vulnerability was found in elecV2 elecV2P up to 3.8.3. The affected element is the function path.join of the file /log/ of the component Wildcard Handler. The manipulation results in path traversal. The attack may be performed from remote. The exploit has been made public and c...

  4. CVE-2026-5013 elecV2 elecV2P :key path.join path traversal

    Published
    MediumCVSS 6.9 EPSS 0.60%

    A vulnerability has been found in elecV2 elecV2P up to 3.8.3. Impacted is the function path.join of the file /store/:key. The manipulation of the argument URL leads to path traversal. The attack is possible to be carried out remotely. The exploit has been disclosed to the public...

  5. CVE-2026-5012 elecV2 elecV2P rpc pm2run os command injection

    Published
    MediumCVSS 6.9 EPSS 1.5%

    A flaw has been found in elecV2 elecV2P up to 3.8.3. This issue affects the function pm2run of the file /rpc. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The project was informed o...

  6. CVE-2026-5011 elecV2 elecV2P JSON webhook runJSFile code injection

    Published
    MediumCVSS 5.3 EPSS 0.24%

    A vulnerability was detected in elecV2 elecV2P up to 3.8.3. This vulnerability affects the function runJSFile of the file /webhook of the component JSON Parser. Performing a manipulation of the argument rawcode results in code injection. Remote exploitation of the attack is possi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.