LavaLite
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| cms | 2 | – | Oct 20, 2026 |
| LavaLite CMS | 1 | – | Jan 23, 2026 |
Exploited and recent CVEs
- CVE-2026-113358 LavaLite CMS through 10.1.2 Missing Authentication via Filer Download Routes 0.4%
- CVE-2026-108951 LavaLite CMS through 10.1.2 Authorization Bypass via User Update API 0.3%
- CVE-2025-71177 LavaLite CMS <= 10.1.0 Stored XSS via Package Creation and Search 0.2%