Pangolin

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Pangolin records in CISA KEV

No Pangolin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pangolin 2 records HIGH

Records

3 records

TI-2025-35309 CVE-2025-56333 · GHSA-cj5p-mv79-727v

An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to…

HIGH 82

An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA component

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00502 Published 2025-12-29 No fix listed CWE-287

TI-2025-35308 CVE-2025-56332 · GHSA-3p4c-m632-jv39

Authentication Bypass in fosrl/pangolin v1.6.2 and before allows attackers to access…

MEDIUM 48

Authentication Bypass in fosrl/pangolin v1.6.2 and before allows attackers to access Pangolin resource via Insecure Default Configuration

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00435 Published 2025-12-30 No fix listed CWE-1188

TI-2026-50283 CVE-2026-72001 · GHSA-gqgf-x763-r89w

Pangolin < 1.22.0 Authentication Bypass via Share-Link Endpoint

MEDIUM 40

Pangolin before 1.22.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access any protected resource by supplying an attacker-controlled URL parameter to the share-link authentica…

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.0049 Published 2026-08-31 Fixed in 1.22.0 CWE-639

Open these records in search →

Critical	2
High	1
Medium	0
Low	0
No CVSS	0