Sign in Free assessment

adlered records

6 published records for vendor adlered.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

23
26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

6 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2023-41009No exploit	File Upload vulnerability in adlered bolo-solo v.2.6 allows a remote attacker to execute arbitrary code via a crafted script to the authorizadlered · bolo-solo · CWE-434 pre-auth RCE File upload	Critical9.8	—	1.7%	Sep 5, 2023
8Monitor	CVE-2026-1691No exploit	bolo-solo SnakeYAML BackupService.java importMarkdownsSync deserializationadlered · bolo-solo · CWE-20 Deserialization	Low2.1	—	0.6%	Jan 30, 2026
8Monitor	CVE-2026-1811No exploit	bolo-blog bolo-solo Filename BackupService.java importFromMarkdown path traversaladlered · bolo-solo · CWE-22 Path traversal	Low2.1	—	0.5%	Feb 3, 2026
8Monitor	CVE-2026-1812No exploit	bolo-blog bolo-solo Filename BackupService.java importFromCnblogs path traversaladlered · bolo-solo · CWE-22 Path traversal	Low2.1	—	0.4%	Feb 3, 2026
8Monitor	CVE-2026-1810No exploit	bolo-blog bolo-solo ZIP File BackupService.java unpackFilteredZip path traversaladlered · bolo-solo · CWE-22 Path traversal	Low2.1	—	0.4%	Feb 3, 2026
8Monitor	CVE-2026-1813No exploit	bolo-blog bolo-solo FreeMarker Template PicUploadProcessor.java unrestricted uploadadlered · bolo-solo · CWE-284 File upload Broken access control (IDOR)	Low2.1	—	0.4%	Feb 3, 2026

CVE-2023-41009
40Plan
File Upload vulnerability in adlered bolo-solo v.2.6 allows a remote attacker to execute arbitrary code via a crafted script to the authoriz
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- File upload
adlered · bolo-soloSep 5, 2023
CVE-2026-1691
8Monitor
bolo-solo SnakeYAML BackupService.java importMarkdownsSync deserialization
LowCVSS 2.1No exploitEPSS 1%
- Deserialization
adlered · bolo-soloJan 30, 2026
CVE-2026-1811
8Monitor
bolo-blog bolo-solo Filename BackupService.java importFromMarkdown path traversal
LowCVSS 2.1No exploitEPSS 0%
- Path traversal
adlered · bolo-soloFeb 3, 2026
CVE-2026-1812
8Monitor
bolo-blog bolo-solo Filename BackupService.java importFromCnblogs path traversal
LowCVSS 2.1No exploitEPSS 0%
- Path traversal
adlered · bolo-soloFeb 3, 2026
CVE-2026-1810
8Monitor
bolo-blog bolo-solo ZIP File BackupService.java unpackFilteredZip path traversal
LowCVSS 2.1No exploitEPSS 0%
- Path traversal
adlered · bolo-soloFeb 3, 2026
CVE-2026-1813
8Monitor
bolo-blog bolo-solo FreeMarker Template PicUploadProcessor.java unrestricted upload
LowCVSS 2.1No exploitEPSS 0%
- File upload
- Broken access control (IDOR)
adlered · bolo-soloFeb 3, 2026