Read the docs

BuilderEngine

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

BuilderEngine records in CISA KEV

No BuilderEngine vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-24260 CVE-2025-34100 · GHSA-q4px-f6mf-p9w2

BuilderEngine 3.5.0 RCE via Unauthenticated Arbitrary File Upload

Priority HIGH 81

An unrestricted file upload vulnerability exists in BuilderEngine 3.5.0 via the integration of the elFinder 2.0 file manager and its use of the jQuery File Upload plugin.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03857 Published 2025-07-10 No fix listed CWE-20
Open these records in search →