MHSanaei

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

MHSanaei records in CISA KEV

No MHSanaei vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

3x-ui 1 record MEDIUM

Records

2 records

TI-2026-40034 CVE-2026-55477 · GHSA-jm48-m3rr-9hgg

Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation

HIGH 67

3X-UI is a web control panel for managing Xray-core servers.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00615 Published 2026-06-25 Fixed in 3.3.1 CWE-73

TI-2025-21044 CVE-2025-29331 · GHSA-fxww-x83j-wpmh

An issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute…

MEDIUM 49

An issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute arbitrary code via the management script x-ui passes the no check certificate option to wget when downloading updates

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00456 Published 2025-06-26 No fix listed CWE-295

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0