Search vulnerabilities

Results 2

Export CSV
CVE-2026-109519

YouTransfer Template Rendering template path traversal

A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template Rendering. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-50880

Remote Code Execution via Crafted Request in YouTransfer Sendmail Transport

An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Products