KodCloud CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM KodCloud CVE published 2026-10-25

CVE-2026-116057

A vulnerability in KodCloud KodExplorer's Online Editor Save Endpoint allows for unrestricted file uploads. This issue, tracked as CVE-2026-116057, affects KodExplorer versions up to 4.55 and could be exploited remotely. The vulnerability is located in the file `app/controller/editor.class.php`. The unrestricted file upload vulnerability in KodExplorer's Online Editor Save Endpoint poses significant risks [truncated]

MEDIUM KodCloud CVE published 2026-10-25

CVE-2026-116056

A server-side request forgery vulnerability exists in KodCloud KodExplorer up to version 4.56 in the Remote Download component's request_url_safe function. This issue allows remote attackers to manipulate the server into making unintended requests. The CVSS score for this vulnerability is 5.3, indicating a medium severity level. The vendor, KodCloud, was contacted but did not respond.