Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Volmarg Clear all filters
TI-2026-84342 CVE-2026-73328 · GHSA-m4hj-g435-qj36

Volmarg Personal Management System File Upload RCE via /upload/send/

Priority MEDIUM 40

Volmarg Personal Management System through 2.1.0 contains an unrestricted file upload vulnerability that allows authenticated users to upload PHP files via the /upload/send/ endpoint.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00709 Published 2026-11-03 No fix listed CWE-434
TI-2026-82224 CVE-2026-118755 · GHSA-pq7g-3p4f-wvm7

OS command injection in Volmarg Personal Management System

Priority MEDIUM 42

Volmarg Personal Management System through 2.1.0 contains an OS command injection vulnerability that allows authenticated users to execute shell commands via unescaped folder paths in the storage module's tree command.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01405 Published 2026-10-28 No fix listed CWE-78
TI-2026-29273 CVE-2026-40526 · GHSA-g95v-m725-f6xc

Volmarg Personal Management System Path Traversal via get-file Endpoint

Priority LOW 33

Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/{path} endpoint.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00797 Published 2026-08-27 Fixed CWE-22