SH
Vendor
Shelf-nu
3
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-54166 | SH shelf.nu Shelf-nu | 7.1 | Sep 11 | Shelf Vulnerable to Server-Side Request Forgery (SSRF) via Asset CSV Import imageUrl Validation Bypass |
| CVE-2026-47697 | SH shelf.nu Shelf-nu | 7.1 | Jul 21 | Shelf has cross-organization IDOR: authenticated users could read/attach another workspace's assets, tags, custodians, bookings, QR codes and audit data |
| CVE-2026-44204 | SH shelf.nu Shelf-nu | 6.5 | May 12 | Shelf: SQL Injection via sortBy Parameter |