Read the docs

Volmarg

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Volmarg records in CISA KEV

No Volmarg vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-82224 CVE-2026-118755 · GHSA-pq7g-3p4f-wvm7

OS command injection in Volmarg Personal Management System

Priority MEDIUM 42

Volmarg Personal Management System through 2.1.0 contains an OS command injection vulnerability that allows authenticated users to execute shell commands via unescaped folder paths in the storage module's tree command.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01405 Published 2026-10-28 No fix listed CWE-78
TI-2026-84342 CVE-2026-73328 · GHSA-m4hj-g435-qj36

Volmarg Personal Management System File Upload RCE via /upload/send/

Priority MEDIUM 40

Volmarg Personal Management System through 2.1.0 contains an unrestricted file upload vulnerability that allows authenticated users to upload PHP files via the /upload/send/ endpoint.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00709 Published 2026-11-03 No fix listed CWE-434
TI-2026-29273 CVE-2026-40526 · GHSA-g95v-m725-f6xc

Volmarg Personal Management System Path Traversal via get-file Endpoint

Priority LOW 33

Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/{path} endpoint.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00797 Published 2026-08-27 Fixed CWE-22
Open these records in search →