Known Vulnerabilities for Site Server by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Site Server" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-85692 json | Nightingale (n9e), as of commit 8362cbe (main branch, confirmed 2026-08-27), contains a server-side request forgery vulnerabi... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-85614 json | OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the GET /tools/site-checker e... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-85609 json | Openpanel before 2.3.0 contains an unauthenticated full-read server-side request forgery (SSRF) vulnerability in the GET /too... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-85600 json | Grav Admin (getgrav/grav-plugin-admin2) versions <= 2.0.19 contain a stored cross-site scripting vulnerability in the tHtml()... | Not Provided | 2026-09-04 | 2026-09-05 |
| CVE-2026-84482 json | WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the get_domain() and isSameDomain(... | Not Provided | 2026-09-01 | 2026-09-02 |
| CVE-2026-84189 json | LibreNMS through 26.4.0 renders JSON fields (name, ip, model, author, commit message) returned by the admin-configurable Oxid... | Not Provided | 2026-09-01 | 2026-09-04 |
| CVE-2026-82757 json | Server-Side Request Forgery (SSRF) vulnerability in ash-project ash_authentication_oauth2_server allows an attacker who contr... | Not Provided | 2026-09-07 | 2026-09-08 |
| CVE-2026-81890 json | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, the netmount command... | Not Provided | 2026-08-31 | 2026-09-01 |
| CVE-2026-81571 json | The Brave WordPress plugin before 0.8.8 does not prevent a URL parameter used to pre-fill a form field from being passed to W... | Not Provided | 2026-09-02 | 2026-09-02 |
| CVE-2026-81315 json | Origin Validation Error vulnerability in ash-project ash_ai allows a malicious web page to bypass the MCP server's DNS-rebind... | Not Provided | 2026-08-31 | 2026-08-31 |