Known Vulnerabilities for Sme Server by Koozali
Listed below are 1 of the newest known vulnerabilities associated with "Sme Server" by "Koozali".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-108702 json | 1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval-flow/webhook/test, allowing any... | Not Provided | 2026-10-11 | 2026-10-11 |
| CVE-2026-108694 json | ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files be... | Not Provided | 2026-10-11 | 2026-10-11 |
| CVE-2026-108688 json | Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that a... | Not Provided | 2026-10-11 | 2026-10-11 |
| CVE-2026-108671 json | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server ... | Not Provided | 2026-10-10 | 2026-10-10 |
| CVE-2026-108602 json | Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows au... | Not Provided | 2026-10-10 | 2026-10-10 |
| CVE-2026-108594 json | Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch that ign... | Not Provided | 2026-10-10 | 2026-10-10 |
| CVE-2026-108591 json | InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create perm... | Not Provided | 2026-10-10 | 2026-10-10 |
| CVE-2026-108585 json | argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that all... | Not Provided | 2026-10-10 | 2026-10-10 |
| CVE-2026-108583 json | zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal... | Not Provided | 2026-10-10 | 2026-10-10 |
| CVE-2026-108582 json | GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows loca... | Not Provided | 2026-10-10 | 2026-10-10 |