Vulnerabilities

TI-2026-50283 CVE-2026-72001 · GHSA-gqgf-x763-r89w

Pangolin < 1.22.0 Authentication Bypass via Share-Link Endpoint

MEDIUM 40

Pangolin before 1.22.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access any protected resource by supplying an attacker-controlled URL parameter to the share-link authentica…

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.0049 Published 2026-08-31 Fixed in 1.22.0 CWE-639

TI-2025-35308 CVE-2025-56332 · GHSA-3p4c-m632-jv39

Authentication Bypass in fosrl/pangolin v1.6.2 and before allows attackers to access…

MEDIUM 48

Authentication Bypass in fosrl/pangolin v1.6.2 and before allows attackers to access Pangolin resource via Insecure Default Configuration

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00435 Published 2025-12-30 No fix listed CWE-1188

TI-2025-35309 CVE-2025-56333 · GHSA-cj5p-mv79-727v

An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to…

HIGH 82

An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA component

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00502 Published 2025-12-29 No fix listed CWE-287

Vulnerabilities

Filters

Pangolin < 1.22.0 Authentication Bypass via Share-Link Endpoint

Authentication Bypass in fosrl/pangolin v1.6.2 and before allows attackers to access…

An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to…