maxkb kayıtları
maxkb üreticisine ait 20 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %65
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-94 Improper Control of Generation of Code ('Code Injection')4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')2
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-918 Server-Side Request Forgery (SSRF)2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
20 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2025-66419İstismar yok | MaxKB vulnerable to privilege escalation through sandbox bypassmaxkb · maxkb · CWE-362 | Kritik10,0 | — | %0,3 | 11 Ara 2025 |
39İzleyin | CVE-2025-53928İstismar yok | MaxKB has RCE in MCP callmaxkb · maxkb · CWE-94 | Kritik9,8 | — | %0,4 | 17 Tem 2025 |
35İzleyin | CVE-2025-64511İstismar yok | MaxKB has SSRF in sandboxmaxkb · maxkb · CWE-918 | Yüksek8,8 | — | %0,2 | 13 Kas 2025 |
30İzleyin | CVE-2025-66446İstismar yok | MaxKB has a Python sandbox LD_PRELOAD bypassmaxkb · maxkb · CWE-362 | Yüksek7,5 | — | %0,3 | 11 Ara 2025 |
29İzleyin | CVE-2026-39420İstismar yok | MaxKB: Sandbox escape via LD_PRELOAD bypassmaxkb · maxkb · CWE-78 | Yüksek7,4 | — | %0,6 | 13 Nis 2026 |
29İzleyin | CVE-2026-39421İstismar yok | MaxKB: Sandbox escape via ctypes and unhooked SYS_pkey_mprotectmaxkb · maxkb · CWE-94 | Yüksek7,4 | — | %0,5 | 13 Nis 2026 |
29İzleyin | CVE-2026-39418İstismar yok | MaxKB: SSRF via sandbox network hook bypassmaxkb · maxkb · CWE-918 | Yüksek7,4 | — | %0,3 | 13 Nis 2026 |
28İzleyin | CVE-2024-56137İstismar yok | MaxKB RCE vulnerability in function librarymaxkb · maxkb · CWE-78 | Yüksek7,2 | — | %0,8 | 2 Oca 2025 |
28İzleyin | CVE-2025-32383İstismar yok | MaxKB has a reverse shell vulnerability in function librarymaxkb · maxkb · CWE-94 | Yüksek7,2 | — | %0,3 | 10 Nis 2025 |
27İzleyin | CVE-2026-39422İstismar yok | MaxKB has Stored XSS via ChatHeadersMiddlewaremaxkb · maxkb · CWE-79 | Orta6,9 | — | %0,3 | 13 Nis 2026 |
27İzleyin | CVE-2026-39423İstismar yok | Stored XSS via Eval Injection in EchartsRander Componentmaxkb · maxkb · CWE-79 | Orta6,9 | — | %0,3 | 13 Nis 2026 |
26İzleyin | CVE-2025-64703İstismar yok | MaxKB has Information Leak in sandboxmaxkb · maxkb · CWE-200 | Orta6,5 | — | %0,2 | 13 Kas 2025 |
25İzleyin | CVE-2025-53927İstismar yok | MaxKB sandbox bypassmaxkb · maxkb · CWE-94 | Orta6,3 | — | %0,2 | 17 Tem 2025 |
23İzleyin | CVE-2025-48950İstismar yok | MaxKB Python Sandbox Bypass in Function Librarymaxkb · maxkb · CWE-276 | Orta5,8 | — | %0,4 | 3 Haz 2025 |
22İzleyin | CVE-2026-39417İstismar yok | MaxKB: RCE via MCP stdio command injection in workflow enginemaxkb · maxkb · CWE-20 | Orta5,5 | — | %0,4 | 13 Nis 2026 |
21İzleyin | CVE-2026-39424İstismar yok | MaxKB has CSV Injection in its Application Chat Export Functionalitymaxkb · maxkb · CWE-1236 | Orta5,3 | — | %0,5 | 13 Nis 2026 |
20İzleyin | CVE-2025-4546İstismar yok | 1Panel-dev MaxKB Knowledge Base Module csv injectionmaxkb · maxkb · CWE-74 | Orta5,1 | — | %0,7 | 11 May 2025 |
20İzleyin | CVE-2026-39425İstismar yok | MaxKB: Stored XSS via Unsanitized html_rander Tags in Markdown Renderingmaxkb · maxkb · CWE-80 | Orta5,1 | — | %0,3 | 13 Nis 2026 |
20İzleyin | CVE-2026-39426İstismar yok | MaxKB: Stored XSS via Unsanitized iframe_render Parsingmaxkb · maxkb · CWE-79 | Orta5,1 | — | %0,2 | 13 Nis 2026 |
12İzleyin | CVE-2026-39419İstismar yok | MaxKB: Sandbox Result Validation Bypass via Tool Output Spoofingmaxkb · maxkb · CWE-74 | Düşük3,1 | — | %0,3 | 13 Nis 2026 |
- CVE-2025-6641940Planlayın
MaxKB vulnerable to privilege escalation through sandbox bypass
KritikCVSS 10,0İstismar yokEPSS %0maxkb · maxkb11 Ara 2025
- CVE-2025-5392839İzleyin
MaxKB has RCE in MCP call
KritikCVSS 9,8İstismar yokEPSS %0maxkb · maxkb17 Tem 2025
- CVE-2025-6451135İzleyin
MaxKB has SSRF in sandbox
YüksekCVSS 8,8İstismar yokEPSS %0maxkb · maxkb13 Kas 2025
- CVE-2025-6644630İzleyin
MaxKB has a Python sandbox LD_PRELOAD bypass
YüksekCVSS 7,5İstismar yokEPSS %0maxkb · maxkb11 Ara 2025
- CVE-2026-3942029İzleyin
MaxKB: Sandbox escape via LD_PRELOAD bypass
YüksekCVSS 7,4İstismar yokEPSS %1maxkb · maxkb13 Nis 2026
- CVE-2026-3942129İzleyin
MaxKB: Sandbox escape via ctypes and unhooked SYS_pkey_mprotect
YüksekCVSS 7,4İstismar yokEPSS %0maxkb · maxkb13 Nis 2026
- CVE-2026-3941829İzleyin
MaxKB: SSRF via sandbox network hook bypass
YüksekCVSS 7,4İstismar yokEPSS %0maxkb · maxkb13 Nis 2026
- CVE-2024-5613728İzleyin
MaxKB RCE vulnerability in function library
YüksekCVSS 7,2İstismar yokEPSS %1maxkb · maxkb2 Oca 2025
- CVE-2025-3238328İzleyin
MaxKB has a reverse shell vulnerability in function library
YüksekCVSS 7,2İstismar yokEPSS %0maxkb · maxkb10 Nis 2025
- CVE-2026-3942227İzleyin
MaxKB has Stored XSS via ChatHeadersMiddleware
OrtaCVSS 6,9İstismar yokEPSS %0maxkb · maxkb13 Nis 2026
- CVE-2026-3942327İzleyin
Stored XSS via Eval Injection in EchartsRander Component
OrtaCVSS 6,9İstismar yokEPSS %0maxkb · maxkb13 Nis 2026
- CVE-2025-6470326İzleyin
MaxKB has Information Leak in sandbox
OrtaCVSS 6,5İstismar yokEPSS %0maxkb · maxkb13 Kas 2025
- CVE-2025-5392725İzleyin
MaxKB sandbox bypass
OrtaCVSS 6,3İstismar yokEPSS %0maxkb · maxkb17 Tem 2025
- CVE-2025-4895023İzleyin
MaxKB Python Sandbox Bypass in Function Library
OrtaCVSS 5,8İstismar yokEPSS %0maxkb · maxkb3 Haz 2025
- CVE-2026-3941722İzleyin
MaxKB: RCE via MCP stdio command injection in workflow engine
OrtaCVSS 5,5İstismar yokEPSS %0maxkb · maxkb13 Nis 2026
- CVE-2026-3942421İzleyin
MaxKB has CSV Injection in its Application Chat Export Functionality
OrtaCVSS 5,3İstismar yokEPSS %0maxkb · maxkb13 Nis 2026
- CVE-2025-454620İzleyin
1Panel-dev MaxKB Knowledge Base Module csv injection
OrtaCVSS 5,1İstismar yokEPSS %1maxkb · maxkb11 May 2025
- CVE-2026-3942520İzleyin
MaxKB: Stored XSS via Unsanitized html_rander Tags in Markdown Rendering
OrtaCVSS 5,1İstismar yokEPSS %0maxkb · maxkb13 Nis 2026
- CVE-2026-3942620İzleyin
MaxKB: Stored XSS via Unsanitized iframe_render Parsing
OrtaCVSS 5,1İstismar yokEPSS %0maxkb · maxkb13 Nis 2026
- CVE-2026-3941912İzleyin
MaxKB: Sandbox Result Validation Bypass via Tool Output Spoofing
DüşükCVSS 3,1İstismar yokEPSS %0maxkb · maxkb13 Nis 2026