Sign in Free assessment

altumcode records

3 published records for vendor altumcode.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2025-69602No exploit	A session fixation vulnerability exists in 66biolinks v62.0.0 by AltumCode, where the application does not regenerate the session identifieraltumcode · 66biolinks · CWE-384 Pre-auth	Critical9.1	—	0.4%	Jan 28, 2026
26Monitor	CVE-2025-69601No exploit	A directory traversal (Zip Slip) vulnerability exists in the “Static Sites” feature of 66biolinks v44.0.0 by AltumCode.altumcode · 66biolinks · CWE-22 Path traversal	Medium6.5	—	0.7%	Jan 28, 2026
21Monitor	CVE-2025-66939No exploit	Cross Site Scripting vulnerability in 66biolinks by AltumCode v.61.0.1 allows an attacker to execute arbitrary code via a crafted favicon fialtumcode · 66biolinks · CWE-79 pre-auth RCE XSS	Medium5.4	—	0.3%	Jan 12, 2026

CVE-2025-69602
36Monitor
A session fixation vulnerability exists in 66biolinks v62.0.0 by AltumCode, where the application does not regenerate the session identifier
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
altumcode · 66biolinksJan 28, 2026
CVE-2025-69601
26Monitor
A directory traversal (Zip Slip) vulnerability exists in the “Static Sites” feature of 66biolinks v44.0.0 by AltumCode.
MediumCVSS 6.5No exploitEPSS 1%
- Path traversal
altumcode · 66biolinksJan 28, 2026
CVE-2025-66939
21Monitor
Cross Site Scripting vulnerability in 66biolinks by AltumCode v.61.0.1 allows an attacker to execute arbitrary code via a crafted favicon fi
MediumCVSS 5.4No exploitEPSS 0%
- pre-auth RCE
- XSS
altumcode · 66biolinksJan 12, 2026