Advisories · Technology

danielbrendel hortusfox-web.

Every CVE that names danielbrendel hortusfox-web among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-108101 CVE record

CVSS 7.7 High

HortusFox through 6.3 Unrestricted File Upload via Plant Attachments
- danielbrendel hortusfox-web
- Unrestricted file upload
Not analysed yet 9 Oct 2026
CVE-2026-108100 CVE record

CVSS 7.1 High

HortusFox before 6.2 SQL Injection via /api/locations/list include_info Parameter
- danielbrendel hortusfox-web
- SQL injection
Not analysed yet 9 Oct 2026
CVE-2026-104069 CVE record

CVSS 8.6 High

HortusFox < 6.2 Remote Code Execution via Theme Import
- danielbrendel hortusfox-web
- Unrestricted file upload
Not analysed yet 6 Oct 2026
CVE-2026-92980 CVE record

CVSS 8.6 High

HortusFox-Web < 6.1 Remote Code Execution via Import/Export
- danielbrendel hortusfox-web
- Unrestricted file upload
Not analysed yet 17 Sept 2026