[ Vendor · 5 CVEs ]
gophish
CVEs affecting gophish published in the last 30 days, plus any gophish CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-107273 | 7 Oct 2026 | CVSS 4.3 | gophishGophish 0.11.0 through 0.12.1 contains a server-side request forgery vulnerability that allows authenticated low-privileged users to reach loopback… | |
| CVE-2026-107269 | 7 Oct 2026 | CVSS 3.7 | gophishGophish through 0.12.1 contains a timing discrepancy vulnerability in AdminServer.Login that allows unauthenticated attackers to enumerate valid… | |
| CVE-2026-107270 | 7 Oct 2026 | CVSS 7.1 | gophishGophish through 0.12.1 contains an insecure direct object reference vulnerability that allows authenticated users to take over other users' groups… | |
| CVE-2026-107271 | 7 Oct 2026 | CVSS 5.3 | gophishGophish through 0.12.1 contains a rate limit bypass vulnerability that allows unauthenticated attackers to evade /login throttling by spoofing… | |
| CVE-2026-107272 | 7 Oct 2026 | CVSS 4.7 | gophishGophish through 0.12.1 contains stored and reflected cross-site scripting vulnerabilities that allow attackers to inject script by returning… |