Known vulnerabilities in daloRADIUS
Vendor:
Liran Tal
Software:
daloRADIUS
Software CPE:
cpe:2.3:a:lirantal:daloradius:*:*:*:*:*:*:*:*
Website:
https://github.com/lirantal
Total vulnerabilities:
6
Public exploits:
4
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU154062 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CWE-79 | Low | - | 12.10.2026 |
SB2026101238 |
||
| #VU154061 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CWE-79 | Low | - | 12.10.2026 |
SB2026101238 |
||
| #VU154060 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CWE-79 | Low | 2.4 | 12.10.2026 |
SB2026101235 |
||
| #VU154059 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
CWE-89 | Medium | 2.4 | 12.10.2026 |
SB2026101235 |
||
| #VU70779 - Improper Control of Generation of Code ('Code Injection') CVE-2023-0046 |
CWE-94 | Low | - | 06.01.2023 |
SB2023010617 |
||
| #VU70778 - Improper Control of Generation of Code ('Code Injection') CVE-2023-0048 |
CWE-94 | Low | - | 06.01.2023 |
SB2023010617 |