Skip to content

Vendor

kalyan02 vulnerabilities

2 published CVES affecting kalyan02, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of kalyan02 alerts

Products

Latest kalyan02 CVEs

Newest publication first

  1. CVE-2026-1978 kalyan02 NanoCMS User Information pagesdata.txt direct request

    Published
    MediumCVSS 6.9 EPSS 0.43%

    A vulnerability was detected in kalyan02 NanoCMS up to 0.4. Affected by this issue is some unknown functionality of the file /data/pagesdata.txt of the component User Information Handler. Performing a manipulation results in direct request. It is possible to initiate the attack r...

  2. CVE-2022-50898 NanoCMS 0.4 - Remote Code Execution (RCE) (Authenticated)

    Published
    HighCVSS 8.6 EPSS 1.3%

    NanoCMS 0.4 contains an authenticated file upload vulnerability that allows remote code execution through unvalidated page content creation. Authenticated attackers can upload PHP files with arbitrary code to the server's pages directory by exploiting the page creation mechanism...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.