linkace records

14 published records for vendor linkace.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 64.3%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

14 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-33953No exploit	LinkAce's SSRF protection can be bypassed via internal hostname resolution in LinkAcelinkace · linkace · CWE-918 SSRF	High8.5	—	0.3%	Mar 27, 2026
34Monitor	CVE-2026-27458No exploit	LinkAce: Stored XSS in Atom Feed via CDATA Escape in List Descriptionlinkace · linkace · CWE-80 XSS	High8.7	—	0.3%	Feb 21, 2026
34Monitor	CVE-2025-62722No exploit	LinkAce: Stored XSS Vulnerability in Link Title Field Through Social Media Sharing Featurelinkace · linkace · CWE-79 XSS	High8.7	—	0.2%	Nov 4, 2025
33Monitor	CVE-2025-53838No exploit	LinkAce has a Stored One Click XSS vulnerabilitylinkace · linkace · CWE-79 XSS	High8.4	—	0.3%	Sep 8, 2025
30Monitor	CVE-2024-56508No exploit	File Upload Vulnerability Leading to XSS in LinkAce v1.15.5linkace · linkace · CWE-434 File upload XSS	High7.6	—	0.4%	Dec 27, 2024
29Monitor	CVE-2025-59424Proof of concept	LinkAce Vulnerable to Stored XSS on the Audit Pagelinkace · linkace · CWE-79 XSS	High7.3	—	0.3%	Sep 18, 2025
28Monitor	CVE-2025-62720No exploit	LinkAce: Data Exfiltration via Export Functions Allow Access to All Users' Private Linkslinkace · linkace · CWE-200 Info leak	High7.1	—	0.4%	Nov 4, 2025
28Monitor	CVE-2025-62721No exploit	LinkAce: Authorization Bypass Allows Unauthorized Access to All Private Links, Lists, and Tagslinkace · linkace · CWE-200 Info leak	High7.1	—	0.4%	Nov 4, 2025
26Monitor	CVE-2026-33954No exploit	LinkAce discloses private notesto unauthorized authenticated users via the web link detail pagelinkace · linkace · CWE-285 Broken access control (IDOR)	Medium6.5	—	0.4%	Mar 27, 2026
26Monitor	CVE-2026-30953No exploit	LinkAce affected by SSRF via link creation: NoPrivateIpRule not applied to LinkStoreRequestlinkace · linkace · CWE-918 SSRF	Medium6.5	—	0.4%	Mar 10, 2026
21Monitor	CVE-2024-56507No exploit	Reflected Cross-Site Scripting (XSS) Vulnerability in LinkAcelinkace · linkace · CWE-79 RCE XSS	Medium5.4	—	0.3%	Dec 27, 2024
21Monitor	CVE-2026-30954No exploit	LinkAce has a Cross-User Tag/List Attachment IDOR in processTaxonomy()linkace · linkace · CWE-639 Broken access control (IDOR)	Medium5.3	—	0.3%	Mar 10, 2026
20Monitor	CVE-2026-35516No exploit	LinkAce has SSRF via CheckLinksCommand - Link URL Update Bypasses laravel-html-meta Protectionlinkace · linkace · CWE-918 SSRF	Medium5.0	—	0.3%	Apr 7, 2026
9Monitor	CVE-2025-62719No exploit	LinkAce: Limited Server-Side Request Forgery (SSRF) in Keyword Fetching Functionalitylinkace · linkace · CWE-918 SSRF	Low2.3	—	0.3%	Nov 4, 2025

CVE-2026-33953
34Monitor
LinkAce's SSRF protection can be bypassed via internal hostname resolution in LinkAce
HighCVSS 8.5No exploitEPSS 0%
- SSRF
linkace · linkaceMar 27, 2026
CVE-2026-27458
34Monitor
LinkAce: Stored XSS in Atom Feed via CDATA Escape in List Description
HighCVSS 8.7No exploitEPSS 0%
- XSS
linkace · linkaceFeb 21, 2026
CVE-2025-62722
34Monitor
LinkAce: Stored XSS Vulnerability in Link Title Field Through Social Media Sharing Feature
HighCVSS 8.7No exploitEPSS 0%
- XSS
linkace · linkaceNov 4, 2025
CVE-2025-53838
33Monitor
LinkAce has a Stored One Click XSS vulnerability
HighCVSS 8.4No exploitEPSS 0%
- XSS
linkace · linkaceSep 8, 2025
CVE-2024-56508
30Monitor
File Upload Vulnerability Leading to XSS in LinkAce v1.15.5
HighCVSS 7.6No exploitEPSS 0%
- File upload
- XSS
linkace · linkaceDec 27, 2024
CVE-2025-59424
29Monitor
LinkAce Vulnerable to Stored XSS on the Audit Page
HighCVSS 7.3Proof of conceptEPSS 0%
- XSS
linkace · linkaceSep 18, 2025
CVE-2025-62720
28Monitor
LinkAce: Data Exfiltration via Export Functions Allow Access to All Users' Private Links
HighCVSS 7.1No exploitEPSS 0%
- Info leak
linkace · linkaceNov 4, 2025
CVE-2025-62721
28Monitor
LinkAce: Authorization Bypass Allows Unauthorized Access to All Private Links, Lists, and Tags
HighCVSS 7.1No exploitEPSS 0%
- Info leak
linkace · linkaceNov 4, 2025
CVE-2026-33954
26Monitor
LinkAce discloses private notesto unauthorized authenticated users via the web link detail page
MediumCVSS 6.5No exploitEPSS 0%
- Broken access control (IDOR)
linkace · linkaceMar 27, 2026
CVE-2026-30953
26Monitor
LinkAce affected by SSRF via link creation: NoPrivateIpRule not applied to LinkStoreRequest
MediumCVSS 6.5No exploitEPSS 0%
- SSRF
linkace · linkaceMar 10, 2026
CVE-2024-56507
21Monitor
Reflected Cross-Site Scripting (XSS) Vulnerability in LinkAce
MediumCVSS 5.4No exploitEPSS 0%
- RCE
- XSS
linkace · linkaceDec 27, 2024
CVE-2026-30954
21Monitor
LinkAce has a Cross-User Tag/List Attachment IDOR in processTaxonomy()
MediumCVSS 5.3No exploitEPSS 0%
- Broken access control (IDOR)
linkace · linkaceMar 10, 2026
CVE-2026-35516
20Monitor
LinkAce has SSRF via CheckLinksCommand - Link URL Update Bypasses laravel-html-meta Protection
MediumCVSS 5.0No exploitEPSS 0%
- SSRF
linkace · linkaceApr 7, 2026
CVE-2025-62719
9Monitor
LinkAce: Limited Server-Side Request Forgery (SSRF) in Keyword Fetching Functionality
LowCVSS 2.3No exploitEPSS 0%
- SSRF
linkace · linkaceNov 4, 2025