Vulnerabilities in Forceu
10 resultsVexday analysis
A Forceu possui 10 vulnerabilidades catalogadas, nenhuma delas sob ataque ativo no momento, com ausência de críticas e publicações recentes. O risco concentra-se em problemas de controle de acesso (CWE-284), sugerindo que as exposições existentes são de natureza mais estrutural do que emergencial, não representando uma ameaça imediata no panorama atual.
CVE-2026-30961MEDIUMGokapi's File Request MaxSize Limit Bypassed via Multi-Chunk UploadEPSS 0.3%CVE-2026-30955MEDIUMGokapi vulnerable to DoS in E2E Metadata ParserEPSS 0.2%CVE-2026-28683HIGHGokapi: Stored XSS in SVG HotlinksEPSS 0.2%CVE-2026-30943MEDIUMGokapi has Privilege Escalation in File ReplaceEPSS 0.2%CVE-2025-48494MEDIUMGokapi vulnerable to stored XSS via uploading file with malicious file nameEPSS 0.2%CVE-2026-29060MEDIUMGokapi: Privilege escalation with auth tokenEPSS 0.1%CVE-2026-28682MEDIUMGokapi: Data Leak in Upload Status StreamEPSS 0.1%CVE-2025-48495MEDIUMGokapi has stored XSS vulnerability in friendly name for API keysEPSS 0.1%CVE-2026-29061MEDIUMGokapi: Privilege escalation via incomplete API-key permission revocation on user rank demotionEPSS 0.1%CVE-2026-29084MEDIUMGokapi: CSRF in Login EndpointEPSS 0.1%