DI
Product
Distributor
by 10up · last CVE Oct 16, 2026
3
CVEs
0
On KEV
5.4
Max CVSS
3
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch

Add Distributor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-111631
5.4
0%
Oct 16
Distributor before 2.3.2 Missing Authorization in External Connection AJAX Actions
Affected: before 2.3.2
CVE-2026-111628
5.0
0%
Oct 16
10up Distributor before 2.3.2 PHP Object Injection via set_meta()
Affected: before 2.3.2
CVE-2026-111625
5.0
0%
Oct 16
10up Distributor before 2.3.2 Missing Authorization via dt_push AJAX Action
Affected: before 2.3.2
Showing 3