Login Request a demo
MA
Product
Markus
by MarkUsProject · last CVE Mar 6, 2026
8
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 2Medium 4Low 1
Severity
All severities8Critical1High2Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Markus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-25057
9.1
1%
Feb 9
Zip Slip in MarkUs config upload allowing RCE
Affected: < 2.9.1
CVE-2024-51743
8.8
1%
Nov 18
MarkUs is a web application for the submission and grading of student assignments
Affected: before 2.4.8
CVE-2024-51499
8.8
1%
Nov 18
MarkUs is a web application for the submission and grading of student assignments
Affected: before 2.4.8
CVE-2026-25962
6.5
0%
Mar 6
MarkUs: Zip bomb in config upload enables DoS
Affected: < 2.9.4
CVE-2026-24900
6.5
0%
Feb 9
MarkUs has a submission-view IDOR exposes all student submissions
Affected: < 2.9.1
CVE-2026-28405
5.4
0%
Mar 5
MarkUs: Stored XSS in Submission HTML Preview Enables Instructor-Context Actions
Affected: < 2.9.1
CVE-2026-27807
4.9
0%
Mar 6
MarkUs: YAML alias (‘billion laughs’) DoS in config upload
Affected: < 2.9.4
CVE-2024-47820
3.5
1%
Nov 18
MarkUs, a web application for the submission and grading of student assignments, is vulnerable to path traversal in versions prior to 2.4.8
Affected: before 2.4.8
Showing 8