FForceu

Products

Exploited and recent CVEs

• CVE-2026-30961 Medium 4.3 Gokapi's File Request MaxSize Limit Bypassed via Multi-Chunk Upload 0.3%
• CVE-2026-30955 Medium 6.5 Gokapi vulnerable to DoS in E2E Metadata Parser 0.3%
• CVE-2026-30943 Medium 4.1 Gokapi has Privilege Escalation in File Replace 0.2%
• CVE-2026-29084 Medium 4.6 Gokapi: CSRF in Login Endpoint <0.1%
• CVE-2026-29061 Medium 5.4 Gokapi: Privilege escalation via incomplete API-key permission revocation on user rank demotion 0.1%
• CVE-2026-29060 Medium 5.0 Gokapi: Privilege escalation with auth token 0.1%
• CVE-2026-28683 High 8.7 Gokapi: Stored XSS in SVG Hotlinks 0.2%
• CVE-2026-28682 Medium 6.4 Gokapi: Data Leak in Upload Status Stream 0.1%
• CVE-2025-48495 Medium 4.8 Gokapi has stored XSS vulnerability in friendly name for API keys 0.1%
• CVE-2025-48494 Medium 4.8 Gokapi vulnerable to stored XSS via uploading file with malicious file name 0.2%