v2board

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

v2board records in CISA KEV

No v2board vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in V2board · all components

TI-2026-28054 CVE-2026-37504 · GHSA-w5vg-8gx8-5cjf

LOW 33

Sensitive server_token exposed via GET parameter in V2Board thru 1.7.4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00286 Published 2026-05-01 No fix listed CWE-598

TI-2026-28053 CVE-2026-37503 · GHSA-4jxj-79x3-676q

LOW 30

Cross-Site Scripting (XSS) in V2Board thru 1.7.4.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00191 Published 2026-05-01 No fix listed CWE-79

TI-2026-28055 CVE-2026-37505 · GHSA-p9jr-g3jg-h6r7

LOW 22

SQL Injection via ORDER BY clause in V2Board thru 1.7.4.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00244 Published 2026-05-01 No fix listed CWE-89