Ajax30 records
4 published records for vendor Ajax30.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-862 Missing Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
37Monitor | CVE-2026-35047No exploit | Brave CMS has Unrestricted File Upload in BraveCMS via CKEditor Endpointajax30 · bravecms · CWE-434 | Critical9.3 | 0.5%Apr 6, 2026 |
35Monitor | CVE-2026-35164No exploit | Brave CMS Sffected by Unrestricted File Upload via CKEditor Endpointajax30 · bravecms · CWE-434 | High8.8 | 0.7%Apr 6, 2026 |
35Monitor | CVE-2026-35182No exploit | Missing Authorization Privilege Escalationajax30 · bravecms · CWE-862 | High8.8 | 0.3%Apr 6, 2026 |
21Monitor | CVE-2026-35183No exploit | Brave CMS has an Insecure Direct Object Reference in Article Image Deletionajax30 · bravecms · CWE-639 | Medium5.4 | 0.2%Apr 6, 2026 |
- CVE-2026-3504737Monitor
Brave CMS has Unrestricted File Upload in BraveCMS via CKEditor Endpoint
CriticalCVSS 9.3No exploitEPSS 0%ajax30 · bravecmsApr 6, 2026
- CVE-2026-3516435Monitor
Brave CMS Sffected by Unrestricted File Upload via CKEditor Endpoint
HighCVSS 8.8No exploitEPSS 0%ajax30 · bravecmsApr 6, 2026
- CVE-2026-3518235Monitor
Missing Authorization Privilege Escalation
HighCVSS 8.8No exploitEPSS 0%ajax30 · bravecmsApr 6, 2026
- CVE-2026-3518321Monitor
Brave CMS has an Insecure Direct Object Reference in Article Image Deletion
MediumCVSS 5.4No exploitEPSS 0%ajax30 · bravecmsApr 6, 2026