GO
Vendor
gophish
7
CVEs
0
On KEV
5
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107273 | GO gophish gophish | 4.3 | Oct 7 | Gophish 0.11.0 through 0.12.1 SSRF via POST /api/import/site |
| CVE-2026-107272 | GO gophish gophish | 4.7 | Oct 7 | Gophish through 0.12.1 XSS via Unescaped SMTP Server Error Messages |
| CVE-2026-107271 | GO gophish gophish | 5.3 | Oct 7 | Gophish through 0.12.1 Login Rate Limit Bypass via X-Forwarded-For Spoofing |
| CVE-2026-107270 | GO gophish gophish | 7.1 | Oct 7 | Gophish through 0.12.1 Object Takeover via Client-Supplied ID on API Create Endpoints |
| CVE-2026-107269 | GO gophish gophish | 3.7 | Oct 7 | Gophish through 0.12.1 Username Enumeration via POST /login Timing Discrepancy |
| CVE-2026-82269 | GO gophish gophish | 8.1 | Aug 28 | Gophish Account Lockout and Forced Password Change Bypassable via API Key |
| CVE-2026-39904 | GO gophish gophish | 6.5 | Jun 22 | Gophish 0.12.1 Denial of Service via Office Document Upload |