Cube-root - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2026-08-10.

Products

• Directory-serve - 2 CVEs

Newest CVEs of Cube-root

• CVE-2026-72570 - CVSS 5.4 (medium), 2026-08-10: A stored cross-site scripting (XSS) vulnerability in cube-root/directory-serve through 1.3.7 allows an attacker to inject arbitrary JavaScript into the web…
• CVE-2026-72569 - CVSS 9.1 (critical), 2026-08-10: A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the…