Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-71881

Cross-site scripting in Integrated Publishing Toolkit

Multiple injection issues in resource metadata fields in GBIF Integrated Publishing Toolkit versions before 3.3.5 allows authenticated remote attackers to execute code in another user's session after user interaction via stored cross-site scripting

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Gbif
Products
Integrated Publishing Toolkit
CVE-2026-71878

Authentication bypass in Integrated Publishing Toolkit

Missing authentication in initial setup functionality left exposed after initial setup is completed in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Gbif
Products
Integrated Publishing Toolkit
CVE-2026-71879

Authentication bypass in Integrated Publishing Toolkit

Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass

CVSS 4.0 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Gbif
Products
Integrated Publishing Toolkit
CVE-2026-71880

Server-side template injection in Integrated Publishing Toolkit

Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection

CVSS 4.0 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Gbif
Products
Integrated Publishing Toolkit