mar10

Products

ProductCVEsExploitedLatest
wsgidav3–Aug 28, 2026

Exploited and recent CVEs

  • CVE-2026-55509 High 8.8 WsgiDAV: Blind SQL injection in the MySQL provider 0.5%
  • CVE-2026-48099 High 7.1 WsgiDAV encoded dot segments can escape filesystem share roots 0.3%
  • CVE-2022-41905 High 8.2 wsgidav is vulnerable to Cross-Site Scripting (XSS) when directory browsing is enabled 0.4%