Read the docs

Apioo

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Apioo records in CISA KEV

No Apioo vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-50810 CVE-2026-72551 · GHSA-j2qp-grc7-qcqj

Apioo Fusio - Remote Code Execution

Priority MEDIUM 42

A remote code execution vulnerability in Apioo Fusio 8.8.3 allows authenticated users with the Developer role to execute arbitrary OS commands by exploiting a PHP-Sandbox allow-list bypass.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01012 Published 2026-08-11 No fix listed CWE-78
TI-2026-50855 CVE-2026-72598 · GHSA-gfrj-pxwg-9r69

Apioo Fusio - Server-Side Request Forgery

Priority LOW 29

A server-side request forgery vulnerability in Apioo Fusio 8.8.3 allows authenticated consumer-role users to make the server issue HTTP requests to internal network addresses by registering a webhook URL pointing to an i…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0037 Published 2026-08-11 No fix listed CWE-918
Open these records in search →