[ Vendor · 2 CVEs ]
lavalite
CVEs affecting lavalite published in the last 30 days, plus any lavalite CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-113358 | 20 Oct 2026 | CVSS 7.5 | lavalite cmsLavaLite CMS through 10.1.2 contains a missing authentication vulnerability in the Filer module that allows unauthenticated attackers to download… | |
| CVE-2026-108951 | 12 Oct 2026 | CVSS 6.5 | lavalite cmsLavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users'… |