Log in Start free

PrivateBin

Products

ProductCVEsExploitedLatest
PrivateBin8–Aug 28, 2026

Exploited and recent CVEs

  • CVE-2026-55891 None 0.0 PrivateBin: Reflected JSON injection in backend responses via unescaped REQUEST_URI 0.5%
  • CVE-2026-55696 Medium 4.3 PrivateBin: Stored Cross-Side-Scripting (XSS) vulnerability in attachment download link via dangerous MIME types with required user-interaction 0.4%
  • CVE-2025-64714 Medium 5.8 PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal 0.5%
  • CVE-2025-64711 Low 3.9 PrivateBin vulnerable to malicious filename use for self-XSS / HTML injection locally for users 0.1%
  • CVE-2025-62796 Medium 5.8 PrivateBin persistent HTML injection in attachment filename enables redirect and defacement 0.3%
  • CVE-2024-39899 Medium 5.3 PrivateBin allows shortening of URLs for other domains 0.6%
  • CVE-2022-24833 High 8.2 Persistent Cross-site Scripting (XSS) vulnerability in PrivateBin 1.4%
  • CVE-2020-5223 Medium 6.1 Persistent XSS vulnerability in filename of attached file in PrivateBin 0.7%