Vendors / Airleader GmbH Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now Airleader GmbH records in CISA KEV No Airleader GmbH vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 67
The Panel Designer dashboard in Airleader Master and Easy before 6.36 allows remote attackers to execute arbitrary commands via a wizard/workspace.jsp unrestricted file upload.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00795 · Published 2025-06-10 · No fix listed CWE-434
Priority MEDIUM 50
Airleader Master versions 6.381 and prior allow for file uploads without restriction to multiple webpages running maximum privileges.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.01203 · Published 2026-02-12 · No fix listed CWE-434
Priority MEDIUM 46
Airleader Master <= 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02199 · Published 2020-11-16 · No fix listed CWE-1188
Priority LOW 35
Airleader Master and Easy <= 6.21 devices have default credentials that can be used for a denial of service.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01099 · Published 2020-11-16 · No fix listed CWE-798
Open these records in search → All records by CVSS severity
2 2 0 0 0
THREATIST.IORead the docs