s9y Serendipity

• CVE-2026-73629 High 8.5 Serendipity before 2.6.0 SSRF via hex IPv4 and IPv6 addresses 0.3%
• CVE-2026-73628 Medium 6.1 Serendipity 2.3.5 Reflected XSS via search clean-URL route 0.3%
• CVE-2026-67350 Medium 4.3 Serendipity < 2.6.1 Open Redirect via exit.php 0.3%
• CVE-2026-67351 High 8.8 Serendipity < 2.6.1 Authentication Bypass via Username Collision 0.6%
• CVE-2026-39971 High 7.2 Serendipity: Host Header Injection leads to SMTP header injection via unvalidated HTTP_HOST 0.3%
• CVE-2026-39963 Medium 6.9 Serendipity: Host Header Injection enables authentication cookie scoping to an attacker-controlled domain 0.2%
• CVE-2023-53933 High 8.8 Serendipity 2.4.0 Authenticated Remote Code Execution via File Upload 1.0%
• CVE-2023-53932 Medium 5.4 Serendipity 2.4.0 Stored Cross-Site Scripting via Admin Entry Creation 0.2%