SQ
Vendor
Squidex
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-41177 | SQ squidex Squidex | 5.5 | Apr 22 | Squidex has Blind SSRF via file:// Protocol in Restore API leading to Local File Interaction |
| CVE-2026-41172 | SQ squidex Squidex | 7.3 | Apr 22 | Squidex vulnerable to Server-Side Request Forgery (SSRF) via URL-based asset upload (/api/apps/{app}/assets) |
| CVE-2026-41171 | SQ squidex Squidex | 7.3 | Apr 22 | SSRF via Jint Scripting Engine HTTP Functions Due to Missing SSRF Protection on "Jint" HttpClient |
| CVE-2026-41170 | SQ squidex Squidex | 7.2 | Apr 22 | Squidex has SSRF via Backup Restore Endpoint — Admin-Controlled URL Download Allows Internal and External Requests |
| CVE-2026-24736 | SQ squidex Squidex | 8.8 | Jan 27 | Squidex has Server-Side Request Forgery (SSRF) Issue in Webhook Configuration |
| CVE-2023-46252 | SQ squidex Squidex | 6.1 | Nov 7 | Cross-Site Scripting (XSS) via postMessage Handler in Squidex |
| CVE-2023-46253 | SQ squidex Squidex | 7.2 | Nov 7 | Remote code execution in Squidex |
| CVE-2023-46744 | SQ squidex Squidex | 5.4 | Nov 7 | Stored Cross-site Scripting in Squidex |