Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: MacWarrior clipbucket-v5 5.5.3-#182 Clear all filters
TI-2026-54246 CVE-2026-77929 · GHSA-g885-94pf-hc9v

ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Upload Endpoint

Priority MEDIUM 41

ClipBucket v5 before 5.5.3-#182 contains a file upload vulnerability that allows authenticated users to achieve remote code execution by uploading a PHP file with valid image magic bytes through the photo upload endpoint…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00941 Published 2026-09-18 Fixed in 5.5.3-#182 CWE-434
TI-2026-54245 CVE-2026-77928 · GHSA-wwv3-r4qp-89fg

ClipBucket < 5.5.3-#182 Blind SQL Injection via Private Message Deletion Endpoint

Priority LOW 32

ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability that allows authenticated users to extract arbitrary database contents by submitting the msg_id parameter as an array to bypass the clean_reque…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00424 Published 2026-09-18 Fixed in 5.5.3-#182 CWE-89
TI-2026-54244 CVE-2026-77927 · GHSA-cxg4-4mfc-283v

ClipBucket < 5.5.3-#182 Blind SQL Injection via Photo Deletion Endpoint

Priority LOW 32

ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability that allows authenticated users to extract arbitrary data from the database by submitting the check_photo parameter as an array to bypass the c…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00424 Published 2026-09-18 Fixed in 5.5.3-#182 CWE-89