kohler hotcrp

• CVE-2026-55493 Medium 6.5 HotCRP: comment-author search exposes anonymous commenter identities 0.3%
• CVE-2026-25156 High 7.3 HotCRP vulnerable to stored XSS via comment attachments 0.3%
• CVE-2026-23878 Medium 6.5 HotCRP vulnerable to exposure of submitted documents 0.3%
• CVE-2026-23836 Critical 10.0 HotCRP vulnerable to remote code execution through formulas 0.5%