Known vulnerabilities in Kiwi 16.3
Vendor:
Kiwi TCMS
Software:
Kiwi
Version:
16.3
Software CPE:
cpe:2.3:a:kiwitcms:kiwi:*:*:*:*:*:*:*:*
Website:
https://kiwitcms.org/
Total vulnerabilities:
6
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Vulnerabilities by Severity
16.6
16.5
16.4
16.3
16.2
16.1
16.999
16.0
15.4
15.3
15.2
15.1
15.0
14.3
14.2
14.1
14.0
13.7
13.6
13.5
13.4
13.3
13.2
13.1.1
13.1
13.0
12.7
12.6.1
12.6
12.5
12.4
12.3
834c86dfd1b2492ccad7ebbfd6304bfec895fed2
12.2
12.1
12.0
11.7
11.6
11.5
11.4
11.3
11.2
11.1
11.0
10.5
10.4
10.3
10.2
10.1
10.0
9.0.1
9.0
8.9
8.8
8.7
8.6.1
8.6
8.5
8.4
8.3
8.2
8.1
8.0
7.3
7.2.1
7.2
7.1
7.0
6.11
6.10
6.9
6.8
6.7
6.6
6.5.3
6.5.2
6.5.1
6.5
6.4
6.3
6.2.1
6.2
6.1.1
6.1
6.0.1
6.0
5.3.1
5.3
5.2
5.1
5.0
4.2
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
4.1
4.0.0
3.50
3.49
3.48
3.44
3.41
3.39
3.38
3.37
3.33
3.32
3.30
3.28
3.26
3.24
3.23
3.22
3.21.2
3.21.1
3.8.18.21
3.8.18.18
3.8.18.17
3.8.18.15
3.8.18.12
3.8.18.10
3.8.18.09
3.8.18.08.01
3.8.18.08
3.8.18.07
3.8.18.05
3.8.18.04
3.8.18
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU154041 - Exposure of sensitive information to an unauthorized actor |
CWE-200 | Medium | 16.6 | 09.10.2026 |
SB2026100946 |
||
| #VU154040 - Missing Authorization |
CWE-862 | Medium | 16.6 | 09.10.2026 |
SB2026100946 |
||
| #VU150958 - Missing Authorization |
CWE-862 | Medium | 16.5 | 18.09.2026 |
SB20260918161 |
||
| #VU150957 - Improper input validation |
CWE-20 | Low | 16.4 | 18.09.2026 |
SB20260918160 |
||
| #VU150956 - Improper Neutralization of Special Elements in Data Query Logic |
CWE-943 | Low | 16.4 | 18.09.2026 |
SB20260918160 |
||
| #VU150955 - Insufficiently Protected Credentials |
CWE-522 | Medium | 16.4 | 18.09.2026 |
SB20260918160 |