Alanaktion

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Alanaktion records in CISA KEV

No Alanaktion vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-66155 CVE-2026-104991 · GHSA-697f-vmv6-cx6w

Phproject < 1.8.7 Missing Authorization via Issues REST API

MEDIUM 64

Phproject before 1.8.7 contains a missing object-level authorization vulnerability in the REST API issue endpoints (single_get, single_comments, single_comments_post) that allows authenticated API key holders to bypass t…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00318 Published 2026-10-02 Fixed in 1.8.7 CWE-862

TI-2025-35653 CVE-2025-57768

Stored XSS in “hours” fields when creating or editing an issue, using SQLite database

MEDIUM 64

Phproject is a high performance full-featured project management system.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00405 Published 2025-08-21 Fixed in 1.8.3 CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0