localsend

Products

ProductCVEsExploitedLatest
localsend3–Jan 30, 2026

Exploited and recent CVEs

  • CVE-2026-25154 Medium 6.1 LocalSend has Stored XSS in Web Share Interface via Filename 0.3%
  • CVE-2025-54792 Critical 9.3 LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception 0.3%
  • CVE-2025-27142 Medium 6.3 LocalSend path traversal vulnerability in the file upload endpoint allows nearby devices to execute arbitrary commands 0.5%