ikus-soft has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 6.7 (medium).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.7
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
ikus-soft vulnerabilities
CVEs affecting ikus-soft, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-109118Medium· 4.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in rdiffweb
Improper path containment check in ikus060 rdiffweb 7.1.1 allows an authenticated user to cause the browse, restore, history and delete operations to resolve to a path outside the repository being operated on, via a percent-encoded trave…
▾ Sunlitikus-soft · rdiffwebvia CVEORG
CVE-2026-109119High· 8.8Missing Authorization in rdiffweb
Improper Privilege Management in the user management API endpoint (/api/users/{username_or_id}) in Rdiffweb allows authenticated users to elevate their privileges to administrator by modifying the role parameter in a POST request.
▾ Twilightikus-soft · rdiffwebvia CVEORG