agentprime: elabftwEvery new CVE for elabftw.https://agentprime.io/CVE-2026-28511: elabftw has entry title leakage through autocompletion searchhttps://agentprime.io/advisories/CVE-2026-28511/https://agentprime.io/advisories/CVE-2026-28511/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 22:24:18 GMTCVECVE-2026-28510: elabftw allows MFA bypass during loginhttps://agentprime.io/advisories/CVE-2026-28510/https://agentprime.io/advisories/CVE-2026-28510/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 May 2026 12:28:10 GMTCVECVE-2025-62793: eLabFTW HTML / CSS Injection via Malicious SVG Upload Leads to Credential Theft / Clickjackinghttps://agentprime.io/advisories/CVE-2025-62793/https://agentprime.io/advisories/CVE-2025-62793/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Oct 2025 21:25:45 GMTCVECVE-2025-25206: Incorrect input validation could allow an authenticated user to read sensitive informationhttps://agentprime.io/advisories/CVE-2025-25206/https://agentprime.io/advisories/CVE-2025-25206/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Feb 2025 16:47:04 GMTCVECVE-2024-52586: eLabFTW MFA bypasshttps://agentprime.io/advisories/CVE-2024-52586/https://agentprime.io/advisories/CVE-2024-52586/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Dec 2024 18:38:42 GMTCVECVE-2024-47826: eLabFTW vulnerable to HTML Injection in extended search error messagehttps://agentprime.io/advisories/CVE-2024-47826/https://agentprime.io/advisories/CVE-2024-47826/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Oct 2024 17:59:26 GMTCVECVE-2024-45408: eLabFTW contains a direct and indirect information disclosurehttps://agentprime.io/advisories/CVE-2024-45408/https://agentprime.io/advisories/CVE-2024-45408/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Oct 2024 14:53:48 GMTCVECVE-2024-25632: Unauthorised granting of administrator privileges over arbitrary teams under certain circumstanceshttps://agentprime.io/advisories/CVE-2024-25632/https://agentprime.io/advisories/CVE-2024-25632/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Oct 2024 14:36:50 GMTCVECVE-2024-28100: Stored Cross-site Scripting leading to arbitrary actions taken on behalf of users in elabftwhttps://agentprime.io/advisories/CVE-2024-28100/https://agentprime.io/advisories/CVE-2024-28100/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Sep 2024 16:10:11 GMTCVECVE-2024-25633: In eLabFTW, if administrators can create users, users can toohttps://agentprime.io/advisories/CVE-2024-25633/https://agentprime.io/advisories/CVE-2024-25633/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Aug 2024 18:23:57 GMTCVECVE-2022-31178: Improper Authorization in eLabFTWhttps://agentprime.io/advisories/CVE-2022-31178/https://agentprime.io/advisories/CVE-2022-31178/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Aug 2022 19:10:11 GMTCVECVE-2022-31007: Privilege escalation from administrator in eLabFTWhttps://agentprime.io/advisories/CVE-2022-31007/https://agentprime.io/advisories/CVE-2022-31007/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 May 2022 19:30:13 GMTCVECVE-2021-43834: Incorrect Authentication in elabftwhttps://agentprime.io/advisories/CVE-2021-43834/https://agentprime.io/advisories/CVE-2021-43834/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Dec 2021 23:20:15 GMTCVEcriticalCVE-2021-43833: Account takeover in eLabFTWhttps://agentprime.io/advisories/CVE-2021-43833/https://agentprime.io/advisories/CVE-2021-43833/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Dec 2021 23:20:10 GMTCVECVE-2021-41171: Bypass bruteforce protection on login form in elabftwhttps://agentprime.io/advisories/CVE-2021-41171/https://agentprime.io/advisories/CVE-2021-41171/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Oct 2021 18:55:11 GMTCVECVE-2021-32698: Blind Server-Side Request Forgery (SSRF) in eLabFTWhttps://agentprime.io/advisories/CVE-2021-32698/https://agentprime.io/advisories/CVE-2021-32698/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Jun 2021 21:15:11 GMTCVE