Advisories · Technology

Download Monitor.

Every CVE that names Download Monitor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-112207 CVE record

CVSS 7.1 High

Download Monitor < 5.3.4 - Reflected XSS via Cross-Origin Download Link
- Download Monitor
- Cross-site scripting (XSS)
Not analysed yet 24 Oct 2026
CVE-2026-112219 CVE record

CVSS 4.9 Medium

Download Monitor < 5.3.5 - Multisite Subsite Admin+ Incorrect Authorization via Approved Download Paths REST Route
- Download Monitor
- Broken access control
Not analysed yet 23 Oct 2026
CVE-2026-16608 CVE record

CVSS 5.3 Medium

Download Monitor < 5.2.6 - Unauthenticated Download Log Injection
- Download Monitor
- Broken access control
Not analysed yet 8 Aug 2026
CVE-2022-2981 CVE record

Download Monitor < 4.5.98 - Admin+ Arbitrary File Download
- Download Monitor
- Information disclosure
Not analysed yet 10 Oct 2022
CVE-2022-2222 CVE record

Download Monitor < 4.5.91 - Admin+ Arbitrary File Download
- Download Monitor
- Information disclosure
Not analysed yet 17 Jul 2022
CVE-2021-24786 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

Download Monitor < 4.4.5 - Admin+ SQL Injection
- Download Monitor
- SQL injection
Not analysed yet 3 Jan 2022