Kovah LinkAce

• CVE-2026-49436 High 7.3 LinkAce vulnerable to stored XSS via 'javascript:' URI in Bulk Link API 0.4%
• CVE-2026-45342 High 7.1 LinkAce: IDOR in Update Policies Allows Any Authenticated User to Overwrite Other Users' Links, Lists, Tags, and Notes 0.2%
• CVE-2026-45343 High 8.5 LinkAce - Stored XSS via Unsanitized SSO User's Name Rendered in Admin Audit Log Allows Session Hijacking 0.3%
• CVE-2026-45344 High 8.1 LinkAce: Setup database password newline injection enables pre-auth RCE on uninitialized instances 0.5%
• CVE-2026-40905 High 8.1 LinkAce: Password Reset Poisoning via X-Forwarded-Host Header Injection Leading to Account Takeover 0.3%
• CVE-2026-35516 Medium 5.0 LinkAce has SSRF via CheckLinksCommand - Link URL Update Bypasses laravel-html-meta Protection 0.3%
• CVE-2026-33954 Medium 6.5 LinkAce discloses private notesto unauthorized authenticated users via the web link detail page 0.3%
• CVE-2026-33953 High 8.5 LinkAce's SSRF protection can be bypassed via internal hostname resolution in LinkAce 0.3%
• CVE-2026-30954 Medium 5.3 LinkAce has a Cross-User Tag/List Attachment IDOR in processTaxonomy() 0.2%
• CVE-2026-30953 High 7.7 LinkAce affected by SSRF via link creation: NoPrivateIpRule not applied to LinkStoreRequest 0.3%
• CVE-2026-27458 High 8.7 LinkAce: Stored XSS in Atom Feed via CDATA Escape in List Description 0.3%
• CVE-2025-62722 High 8.7 LinkAce: Stored XSS Vulnerability in Link Title Field Through Social Media Sharing Feature 0.3%
• CVE-2025-62721 High 7.1 LinkAce: Authorization Bypass Allows Unauthorized Access to All Private Links, Lists, and Tags 0.4%
• CVE-2025-62720 High 7.1 LinkAce: Data Exfiltration via Export Functions Allow Access to All Users' Private Links 0.4%
• CVE-2025-62719 Low 2.3 LinkAce: Limited Server-Side Request Forgery (SSRF) in Keyword Fetching Functionality 0.3%
• CVE-2025-59424 High 7.3 LinkAce Vulnerable to Stored XSS on the Audit Page 0.4%
• CVE-2025-53838 High 8.4 LinkAce has a Stored One Click XSS vulnerability 0.3%
• CVE-2024-56508 High 7.6 File Upload Vulnerability Leading to XSS in LinkAce v1.15.5 0.4%
• CVE-2024-56507 Medium 4.6 Reflected Cross-Site Scripting (XSS) Vulnerability in LinkAce 0.3%