pgyer codefever vulnerabilities

Latest pgyer codefever CVEs

Newest publication first

1. CVE-2026-116255 PGYER codefever URI Sanitizer doc.php _detail path traversal

   Published 2026-10-26

   Medium·CVSS 6.9 EPSS 0.68%

   A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Affected is the function _detail of the file application/controllers/doc.php of the component URI Sanitizer. The manipulation of the argument uri_string leads to path traversal. The...

2. CVE-2023-44080 An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchList component.

   Published 2023-09-27

   Critical·CVSS 9.8 EPSS 1.2%

   An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchList component.

3. CVE-2023-26817 codefever before 2023.2.7-commit-b1c2e7f was discovered to contain a remote code execution (RCE) vulnerability via the component /controllers/api/user.php.

   Published 2023-04-07

   High·CVSS 8.8 EPSS 1.5%

   codefever before 2023.2.7-commit-b1c2e7f was discovered to contain a remote code execution (RCE) vulnerability via the component /controllers/api/user.php.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.