Read the docs

Labs64

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Labs64 records in CISA KEV

No Labs64 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Credit Tracker 1 record LOW

Records

5 records

TI-2026-74648 CVE-2026-57496 · GHSA-hxpf-9xvq-wph8

Path traversal in NetLicensing MCP Server exposes plaintext tokens

Priority HIGH 76

NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00435 Published 2026-10-15 Fixed in 0.1.8 CWE-22
TI-2024-36379 CVE-2024-54291 · GHSA-fmgc-85r6-v6q3

WordPress PluginPass plugin <= 0.9.10 - Arbitrary File Download/Delete vulnerability

Priority MEDIUM 44

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in labs64 PluginPass pluginpass-pro-plugintheme-licensing allows Manipulating Web Input to File System Calls.This issue affects…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0056 Published 2025-03-28 No fix listed CWE-22
TI-2024-35049 CVE-2024-52378 · GHSA-v54f-4grx-9p5c

WordPress DigiPass plugin <= 0.3.0 - Arbitrary File Download vulnerability

Priority MEDIUM 40

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in labs64 DigiPass digipass allows Absolute Path Traversal.This issue affects DigiPass: from n/a through <= 0.3.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00558 Published 2024-11-14 No fix listed CWE-22
Open these records in search →