Known vulnerabilities in daloRADIUS 2.4

Vendor: Liran Tal
Software: daloRADIUS
Version: 2.4
Software CPE: cpe:2.3:a:lirantal:daloradius:*:*:*:*:*:*:*:*
Website: https://github.com/lirantal
Total vulnerabilities: 2
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting daloRADIUS version 2.4 daloRADIUS 2.4 is affected by 2 vulnerabilities: 2 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU154062 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
Public exploit available
No
 - 12.10.2026 SB2026101238
#VU154061 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
Public exploit available
No
 - 12.10.2026 SB2026101238