PandaXGO

Products

ProductCVEsExploitedLatest
PandaX5–Dec 27, 2025

Exploited and recent CVEs

  • CVE-2025-15108 Low 3.7 PandaXGO PandaX JWT Secret config.yml hard-coded key 0.3%
  • CVE-2024-2565 Medium 6.3 PandaXGO PandaX File Extension upload.go unrestricted upload 0.6%
  • CVE-2024-2564 Medium 6.3 PandaXGO PandaX user.go ExportUser path traversal 0.5%
  • CVE-2024-2563 Medium 5.4 PandaXGO PandaX upload.go DeleteImage path traversal 0.9%
  • CVE-2024-2562 Medium 6.3 PandaXGO PandaX role_menu.go InsertRole sql injection 0.5%