Ppheditor

Products

Exploited and recent CVEs

• CVE-2026-55579 Critical 9.8 Pheditor: Hardcoded default password 'admin' with no forced change enables full application compromise 0.8%
• CVE-2026-55578 High 8.8 Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection 0.7%
• CVE-2026-54540 High 8.8 Authenticated terminal command whitelist bypass in Pheditor 0.7%
• CVE-2026-48030 Critical 9.9 Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter (CWE-78) 7.5%