pandora-analysis

Products

ProductCVEsExploitedLatest
pandora5–Sep 9, 2026

Exploited and recent CVEs

  • CVE-2026-88069 Critical 9.3 Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis 0.5%
  • CVE-2026-75531 High 7.0 Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandora 0.4%
  • CVE-2026-75529 Medium 6.9 Stored Cross-Site Scripting via MIME-Type Confusion in PDF Downloads of Pandora 0.4%
  • CVE-2026-74767 High 8.7 Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb 0.4%
  • CVE-2026-74764 Critical 10.0 Path Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora 0.6%