Skip to content
Ppandora-analysis
Products
| Product | CVEs | Exploited | Latest |
| pandora | 5 | – | Sep 9, 2026 |
Exploited and recent CVEs
-
CVE-2026-88069
Critical 9.3
Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis
0.5%
-
CVE-2026-75531
High 7.0
Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandora
0.4%
-
CVE-2026-75529
Medium 6.9
Stored Cross-Site Scripting via MIME-Type Confusion in PDF Downloads of Pandora
0.4%
-
CVE-2026-74767
High 8.7
Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb
0.4%
-
CVE-2026-74764
Critical 10.0
Path Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora
0.6%