TH
Product
Thelia
by Thelia · last CVE Oct 19, 2026
14
CVEs
0
On KEV
8.8
Max CVSS
14
New 30D
Severity mix
Critical 0High 5Medium 8Low 1
Watch

Add Thelia to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-103526
3.7
0%
Oct 12
In Thelia v2.6.0, both the administrative login and forgotten password endpoints return different responses for invalid usernames and incorrect passwords, allowing unauthenticated…
Affected: through 2.6.0
Showing 1