Dumbwareio vulnerabilities

Products

• Dumbdrop 3
• Dumbassets 2

Newest

• dumbwareio dumbassets DumbAssets 1.0.11 Stored Cross-Site Scripting via Asset Fields CVE-2026-45231 5.3 MediumMay 18, 2026
• dumbwareio dumbassets DumbAssets 1.0.11 Path Traversal File Deletion via /api/delete-file CVE-2026-45230 8.8 HighMay 18, 2026
• dumbwareio dumbdrop DumbDrop vulnerable to DOM XSS via file upload CVE-2025-47929 2.1 LowMay 15, 2025
• dumbwareio dumbdrop OS Command Injection endpoint '/upload/init' parameter 'filename' (RCE) in DumpDrop CVE-2025-24971 Public exploit 9.5 CriticalFebruary 4, 2025
• dumbwareio dumbdrop Dumb Drop has an arbitrary file overwrite and path traversal for root shell CVE-2025-24891 9.7 CriticalJanuary 31, 2025