ICEcoder

Products

Product	CVEs	Exploited	Latest
ICEcoder	4	–	Sep 10, 2026
icecoder/icecoder	1	–	Jan 17, 2022

CVE-2026-64838 High 8.3 ICEcoder through 8.1 Path Traversal via oldFileName Parameter 0.5%
CVE-2026-64837 High 8.8 ICEcoder through 8.1 OS Command Injection via lib/properties.php 0.8%
CVE-2026-64836 High 8.8 ICEcoder through 8.1 Path Traversal via Ineffective File::check() Confinement 0.6%
CVE-2026-63722 Critical 9.8 ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php 1.3%
CVE-2021-3862 Medium 5.4 Cross-site Scripting (XSS) - Reflected in icecoder/icecoder 0.7%