Aaces

Products

Exploited and recent CVEs

• CVE-2026-55146 Medium 4.3 LORIS has incorrect access checks in issue_tracker 0.2%
• CVE-2026-55147 Medium 6.3 LORIS has incorrect access checks in API for Imaging Browser 0.2%
• CVE-2026-39985 Medium 4.3 LORIS has an open redirect field on login 0.2%
• CVE-2026-35446 High 7.7 LORIS has a path traversal in FilesDownloadHandler 0.2%
• CVE-2026-35403 Medium 6.5 LORIS has potential cross-site scripting in survey_accounts module 0.2%
• CVE-2026-35400 Low 3.5 LORIS incorrectly trusts user input in publication module 0.2%
• CVE-2026-35169 High 8.7 LORIS has potential cross-site scripting in help_editor module 0.2%
• CVE-2026-35165 Medium 6.3 LORIS has incorrect access checks in document_repository 0.2%
• CVE-2026-34985 Medium 6.3 LORIS has incorrect access checks in media module 0.2%
• CVE-2026-34392 High 7.5 LORIS has a path traversal in static router 0.3%
• CVE-2026-33350 High 7.5 LORIS has a SQL injection in MRI feedback popup 0.2%
• CVE-2026-26985 High 8.1 LORIS vulnerable to path traversal in electrophysiology_browser 0.4%
• CVE-2026-26984 High 8.7 LORIS media module vulnerable to remote code execution 0.8%