privatebin has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 2.1 (low).
CVEs per month
Last 12 months, by publish date
1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 2.1
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
privatebin vulnerabilities
CVEs affecting privatebin, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-55891Low· 0.0PrivateBin is an online pastebin where the server has zero knowledge of pasted data
PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, Request::getRequestUri() in lib/Request.php passes $_SERVER['REQUEST_URI'] through FILTER_SANITIZE_URL, which does not remove quotation …
▾ Sunlitprivatebin · privatebin/privatebinEPSS 0.33%via NVD
CVE-2026-55696Medium· 4.3PrivateBin is an online pastebin where the server has zero knowledge of pasted data
PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, AttachmentViewer.setAttachment in js/privatebin.js uses getAttachmentMimeType to accept attacker-controlled MIME types and uses getBlobU…
▾ Sunlitprivatebin · privatebin/privatebinEPSS 0.22%via NVD