Forceu records
10 published records for vendor forceu.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-284 Improper Access Control2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-770 Allocation of Resources Without Limits or Throttling1
- CWE-863 Incorrect Authorization1
- CWE-400 Uncontrolled Resource Consumption1
The weakness classes this vendor ships most often: where to look.
CWEAll records
10 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
34Monitor | CVE-2026-28683No exploit | Gokapi: Stored XSS in SVG Hotlinksforceu · gokapi · CWE-79 | High8.7 | — | 0.2% | Mar 6, 2026 |
26Monitor | CVE-2026-30955No exploit | Gokapi vulnerable to DoS in E2E Metadata Parserforceu · gokapi · CWE-400 | Medium6.5 | — | 0.3% | Mar 13, 2026 |
25Monitor | CVE-2026-28682No exploit | Gokapi: Data Leak in Upload Status Streamforceu · gokapi · CWE-200 | Medium6.4 | — | 0.2% | Mar 6, 2026 |
21Monitor | CVE-2026-29061No exploit | Gokapi: Privilege escalation via incomplete API-key permission revocation on user rank demotionforceu · gokapi · CWE-284 | Medium5.4 | — | 0.1% | Mar 6, 2026 |
20Monitor | CVE-2026-29060No exploit | Gokapi: Privilege escalation with auth tokenforceu · gokapi · CWE-284 | Medium5.0 | — | 0.2% | Mar 6, 2026 |
19Monitor | CVE-2025-48494No exploit | Gokapi vulnerable to stored XSS via uploading file with malicious file nameforceu · gokapi · CWE-79 | Medium4.8 | — | 0.2% | Jun 2, 2025 |
19Monitor | CVE-2025-48495No exploit | Gokapi has stored XSS vulnerability in friendly name for API keysforceu · gokapi · CWE-79 | Medium4.8 | — | 0.1% | Jun 2, 2025 |
18Monitor | CVE-2026-29084No exploit | Gokapi: CSRF in Login Endpointforceu · gokapi · CWE-352 | Medium4.6 | — | 0.1% | Mar 6, 2026 |
17Monitor | CVE-2026-30961No exploit | Gokapi's File Request MaxSize Limit Bypassed via Multi-Chunk Uploadforceu · gokapi · CWE-770 | Medium4.3 | — | 0.3% | Mar 13, 2026 |
16Monitor | CVE-2026-30943No exploit | Gokapi has Privilege Escalation in File Replaceforceu · gokapi · CWE-863 | Medium4.1 | — | 0.2% | Mar 13, 2026 |
- CVE-2026-2868334Monitor
Gokapi: Stored XSS in SVG Hotlinks
HighCVSS 8.7No exploitEPSS 0%forceu · gokapiMar 6, 2026
- CVE-2026-3095526Monitor
Gokapi vulnerable to DoS in E2E Metadata Parser
MediumCVSS 6.5No exploitEPSS 0%forceu · gokapiMar 13, 2026
- CVE-2026-2868225Monitor
Gokapi: Data Leak in Upload Status Stream
MediumCVSS 6.4No exploitEPSS 0%forceu · gokapiMar 6, 2026
- CVE-2026-2906121Monitor
Gokapi: Privilege escalation via incomplete API-key permission revocation on user rank demotion
MediumCVSS 5.4No exploitEPSS 0%forceu · gokapiMar 6, 2026
- CVE-2026-2906020Monitor
Gokapi: Privilege escalation with auth token
MediumCVSS 5.0No exploitEPSS 0%forceu · gokapiMar 6, 2026
- CVE-2025-4849419Monitor
Gokapi vulnerable to stored XSS via uploading file with malicious file name
MediumCVSS 4.8No exploitEPSS 0%forceu · gokapiJun 2, 2025
- CVE-2025-4849519Monitor
Gokapi has stored XSS vulnerability in friendly name for API keys
MediumCVSS 4.8No exploitEPSS 0%forceu · gokapiJun 2, 2025
- CVE-2026-2908418Monitor
Gokapi: CSRF in Login Endpoint
MediumCVSS 4.6No exploitEPSS 0%forceu · gokapiMar 6, 2026
- CVE-2026-3096117Monitor
Gokapi's File Request MaxSize Limit Bypassed via Multi-Chunk Upload
MediumCVSS 4.3No exploitEPSS 0%forceu · gokapiMar 13, 2026
- CVE-2026-3094316Monitor
Gokapi has Privilege Escalation in File Replace
MediumCVSS 4.1No exploitEPSS 0%forceu · gokapiMar 13, 2026