Login Request a demo
IC
Product
ICEcoder
by ICEcoder · last CVE Sep 10, 2026
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 1High 4Medium 5Low 0
Severity
All severities10Critical1High4Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ICEcoder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-63722
9.8
1%
Aug 19
ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php
Affected: through 8.1
CVE-2026-64837
8.8
1%
Sep 10
ICEcoder through 8.1 OS Command Injection via lib/properties.php
Affected: 8.0 through 8.1
CVE-2026-64836
8.8
1%
Sep 10
ICEcoder through 8.1 Path Traversal via Ineffective File::check() Confinement
Affected: 8.0 through 8.1
CVE-2026-64838
8.3
1%
Sep 10
ICEcoder through 8.1 Path Traversal via oldFileName Parameter
Affected: 8.0 through 8.1
CVE-2022-34026
7.5
2%
Sep 22
ICEcoder v8.1 allows attackers to execute a directory traversal
Affected: 8.1
CVE-2024-41373
6.3
0%
Jul 26
ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php
Affected: 8.1
CVE-2024-41375
6.1
0%
Jul 26
ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/terminal-xhr.php
Affected: 8.1
CVE-2024-41374
6.1
0%
Jul 26
ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/settings-screen.php
Affected: 8.1
CVE-2021-32106
5.4
1%
Jun 8
In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the _GET['replace'] variable
Affected: 8.0
CVE-2021-3862
4.8
1%
Jan 17
icecoder is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected: before 8.1
Showing 10