Advisories · Technology

bunkerity bunkerweb.

Every CVE that names bunkerity bunkerweb among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-75514 CVE record

CVSS 5.9 Medium

BunkerWeb: rDNS bypass via missing forward-confirmation (FCrDNS) in blacklist, greylist, and antibot
- bunkerity bunkerweb
- CWE-350
Not analysed yet 20 Aug 2026
CVE-2026-54728 CVE record

CVSS 6.1 Medium

bunkerweb: Improper Input Validation and Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in BunkerWeb
- bunkerity bunkerweb
- Other injection
- CWE-20
Not analysed yet 16 Jul 2026
CVE-2026-61718 CVE record

CVSS 5.4 Medium

bunkerweb: Read-only Web UI users can delete job cache files due to missing authorization on /cache/ routes
- bunkerity bunkerweb
- Broken access control
Not analysed yet 16 Jul 2026