[ Vendor · 2 CVEs ]
Microweber
CVEs affecting Microweber published in the last 30 days, plus any Microweber CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-5695 | 23 Sep 2026 | CVSS 8.4 | Microweber Administration panelArbitrary file upload vulnerability due to a lack of proper validation in upload forms. This allows authenticated users to upload files to the server… | |
| CVE-2026-5696 | 23 Sep 2026 | CVSS 5.9 | Microweber Administration panelReflected Cross-Site Scripting (XSS) in Microweber. The vulnerability lies in the ‘group’ parameter of the ‘/admin/settings’ endpoint in the… |