Pangolin

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Pangolin records in CISA KEV

No Pangolin vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Pangolin · all components

TI-2025-35309 CVE-2025-56333 · GHSA-cj5p-mv79-727v

HIGH 82

An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA component

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00502 Published 2025-12-29 No fix listed CWE-287

TI-2025-35308 CVE-2025-56332 · GHSA-3p4c-m632-jv39

MEDIUM 48

Authentication Bypass in fosrl/pangolin v1.6.2 and before allows attackers to access Pangolin resource via Insecure Default Configuration

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00435 Published 2025-12-30 No fix listed CWE-1188