PMWeb vulnerabilities
CVEs whose affected-version data names the PMWeb package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-101082Medium· 5.3A weakness has been identified in PMWeb 7.x/8.x/2025.x
A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloader.aspx. This manipulation of the argument FullFileName/FileName causes path traversal. The attack may be initiated re…
▾ Sunlitvia NVD
CVE-2026-101083Medium· 5.3PoCA security vulnerability has been detected in PMWeb v7.x/v8.x/v2025.x
A security vulnerability has been detected in PMWeb v7.x/v8.x/v2025.x. Impacted is an unknown function in the library encryptionhelper.dll. Such manipulation leads to information disclosure. The attack may be launched remotely. The vendo…
▾ Twilightvia NVD