KodCloud has 4 CVEs on record between 2025 and 2026. 2 were published in the last 90 days. The median CVSS is 6.3 (medium). Most affected products: KodExplorer (3), kodbox (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.3
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Worst active — by depth score
CVE-2026-116057Medium· 6.3KodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload35CVE-2026-116056Medium· 6.3KodCloud KodExplorer Remote Download web.function.php request_url_safe server-side request forgery35CVE-2025-10233Medium· 6.3A security vulnerability has been detected in kalcaddle kodbox 1.6135CVE-2025-34504Medium· 6.1KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter34
KodCloud vulnerabilities
CVEs affecting KodCloud, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-116056Medium· 6.3KodCloud KodExplorer Remote Download web.function.php request_url_safe server-side request forgery
A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is the function request_url_safe of the file app/function/web.function.php of the component Remote Download. This manipulation causes server-side request forgery. It is p…
CVE-2026-116057Medium· 6.3KodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload
A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown functionality of the file app/controller/editor.class.php of the component Online Editor Save Endpoint. Such manipulation of …
CVE-2025-34504Medium· 6.1KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter
KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external we…
CVE-2025-10233Medium· 6.3A security vulnerability has been detected in kalcaddle kodbox 1.61
A security vulnerability has been detected in kalcaddle kodbox 1.61. This affects the function fileGet/fileSave of the file app/controller/explorer/editor.class.php. The manipulation of the argument path leads to path traversal. The atta…