linqi GmbH

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

linqi GmbH records in CISA KEV

No linqi GmbH vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Linqi 6 records MEDIUM

Records

10 records

TI-2024-22349 CVE-2024-33868 · GHSA-xp6h-p4cj-42w8

An issue was discovered in linqi before 1.4.0.1 on Windows.

MEDIUM 51

An issue was discovered in linqi before 1.4.0.1 on Windows.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2024-05-14 No fix listed CWE-90

TI-2024-22344 CVE-2024-33863 · GHSA-h256-c797-73hf

An issue was discovered in linqi before 1.4.0.1 on Windows.

MEDIUM 50

An issue was discovered in linqi before 1.4.0.1 on Windows.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00605 Published 2024-05-14 No fix listed CWE-98

TI-2024-22346 CVE-2024-33865 · GHSA-gmv6-m227-94c4

An issue was discovered in linqi before 1.4.0.1 on Windows.

MEDIUM 40

An issue was discovered in linqi before 1.4.0.1 on Windows.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00659 Published 2024-05-14 No fix listed CWE-200

TI-2026-09795 CVE-2026-11347 · GHSA-gg86-h3jm-9m46

Hardcoded Cryptographic Keys and Weak IV Generation in linqi

LOW 37

The linqi application contains hardcoded cryptographic keys.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00073 Published 2026-06-05 No fix listed CWE-321

TI-2026-09793 CVE-2026-11345 · GHSA-xj32-w24w-7c6q

Improper Authentication Bypass in linqi CDN File Access

LOW 37

An Improper Authentication vulnerability in the /api/Cdn/GetFile endpoint of linqi allows unauthenticated, remote attackers to bypass file access controls.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00414 Published 2026-06-05 Fixed in 1.4.8.6 CWE-287

TI-2026-09814 CVE-2026-11369 · GHSA-8rq4-278f-v3vj

IDOR in Comment API Allows Cross-Process Comment Read and Write

LOW 31

The Comment API (GET /api/Comment and POST /api/Comment) in the affected application fails to perform authorization checks to verify that the requesting user has access to the object identified by the relatedObjectId.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00207 Published 2026-06-05 No fix listed CWE-639

TI-2024-22345 CVE-2024-33864 · GHSA-5p37-9q3q-vh68

An issue was discovered in linqi before 1.4.0.1 on Windows.

LOW 29

An issue was discovered in linqi before 1.4.0.1 on Windows.

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.00454 Published 2024-05-14 No fix listed CWE-918

TI-2024-22347 CVE-2024-33866 · GHSA-q88x-259m-g943

An issue was discovered in linqi before 1.4.0.1 on Windows.

LOW 25

An issue was discovered in linqi before 1.4.0.1 on Windows.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.0041 Published 2024-05-14 No fix listed CWE-79

TI-2026-09794 CVE-2026-11346 · GHSA-c7cw-qcqw-c783

Server-Side Request Forgery (SSRF) allowing Internal Network Probing in linqi

LOW 23

A Server-Side Request Forgery (SSRF) vulnerability in the custom process creation feature of linqi allows an authenticated attacker to probe internal network components.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00226 Published 2026-06-05 Fixed in 1.4.8.6 CWE-918

TI-2024-22348 CVE-2024-33867 · GHSA-pmhm-2vvm-8rvj

An issue was discovered in linqi before 1.4.0.1 on Windows.

LOW 21

An issue was discovered in linqi before 1.4.0.1 on Windows.

CVSS 3.1MEDIUM 4.8 Local High privileges User interaction EPSS 0.00217 Published 2024-05-14 No fix listed CWE-259

Open these records in search →

Critical	2
High	3
Medium	5
Low	0
No CVSS	0