cloudreve records
2 published records for vendor cloudreve.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2026-25726No exploit | Cloudreve is vulnerable to Account Takeover via Weak Cryptographic Token Generation (Insecure PRNG Seeding)cloudreve · cloudreve · CWE-338 | Critical9.8 | — | 0.5% | Apr 3, 2026 |
21Monitor | CVE-2022-32167No exploit | Cloudreve - Stored XSScloudreve · cloudreve · CWE-79 | Medium5.4 | — | 0.5% | Sep 20, 2022 |
- CVE-2026-2572639Monitor
Cloudreve is vulnerable to Account Takeover via Weak Cryptographic Token Generation (Insecure PRNG Seeding)
CriticalCVSS 9.8No exploitEPSS 0%cloudreve · cloudreveApr 3, 2026
- CVE-2022-3216721Monitor
Cloudreve - Stored XSS
MediumCVSS 5.4No exploitEPSS 0%cloudreve · cloudreveSep 20, 2022